Just a quick note if you haven't noticed yet. You can issue powershell via WSUS and Windows Updates. If you isntall it you will get a shortcut on the start menu to the powerdhell command. You won't want the kids in that!
You can either A not install or B remove the shortcut in Server 2008 group policy or remove the shortcut using a script or something else.