Really not difficult to stop this, we've done it already. Windows 7 has applocker:

http://www.microsoft.com/windows/enterprise/products/windows-7/features.aspx#applocker

And prior to that Vista/XP had software restriction policies.

http://technet.microsoft.com/en-us/library/cc782792(WS.10).aspx

Avatar wasn't very good - the plot is weak and the characters are all one dimensional. The social commentary is blatantly one sided as well.

I'd suggest this review.

Part 1 - http://www.youtube.com/user/RedLetterMedia#p/u/21/JmUzoIENIXc

Part 2 - http://www.youtube.com/user/RedLetterMedia#p/u/6/dLzKwTcGO_0

This is for the previous Reader vulnerability. The new one is very much in the Javascript functions:

http://www.securityfocus.com/bid/34736

Vista isn't popular, but it is very flexible with group policy. You can manage all power settings via GPO in Vista.

http://www.energystar.gov/ia/products/power_mgt/Vista_on_Win2000_2003.pdf

If you use group policy preferences (requires a Vista/2008 to manage the policy) you can use that to configure power settings on XP.

WSUS is also smart enough to wake the machine up at nighttime and apply patches that it detected during the day.