Norton Ghost for individual workstation backups. These can be used to construct a skeleton common to all workstations so that it is easier to revert to a set of custom defaults when things go wrong.
As for data backups, I tend to use a RAID configuration to make multiple copies of data, and this is then mirrored to several different servers, some of which are offsite. The channels are encrypted.