What plugin to choose

I would like to set up a multisite for a client that they’re employees could sign up for a blog but would be required to only use the features offered. In other words they could not upload themes or plugins, only allowed to pick and choose what the company allows.

They would also like upon signup that the generic site be generated automatically.

This would be a free service to their staff.