I am working to rebuild my company's dev/test/QA environment. We have 10-15 programmers that are involved in a number of projects. They currently all develop locally on their PCs and use the dev environment for testing. We currently do not have a QA environment, so deployments are frequently a pain because bugs are usually found after something has gone live. Here's what I envision:

1. Doing away with everyone's local admin privileges and making everyone develop on a dev server
2. Create a QA environment that is identical to our production systems. This will allow them to test deployments.
3. Create a new test environment that is more locked down than the dev server so that proper testing can be done.

What are your thoughts? What is the best way to set up an environment like this? We develop ASP .NET applications using MS Visual Studio 2008 (if that helps).