That sounds fine. You don't need WINS really, it'll help, but not much, certainly not as much as you'd think it would.
You should be able to modify the firewall rules with Group Policy (Computer Configuration / Administrative Templates / Windows Settings / Network), although I haven't seen a rule there stop the browser from starting before.
Chris