Another way you can configure Vista to prevent certain kinds of devices from being installed.
There is a feature that is recently new to Sysprep that can speed up your time and get rid of one of the larger headaches of using the tool.
Vista can be configured to prevent any new devices from being installed.
Admins on Vista machines are also subject to device installation restrictions, but you can change this.
Roaming profiles are very finicky when it comes to certain things. Here is a list of things NOT to do when implementing roaming profiles.