Please see Common purchasing, upgrading and licensing questions
You could make the configuration folders read-only. People would still be able to make some changes but they would not persist beyond a restart (and some would not work at all).
I am not sure what you mean. Could you give more detail?