Hi Patrick, as long as the access rights management hasn't changed too much since 8.4.3, this should be relatively easy.
First, remember this: once a permission is set, it is denied to everyone else, so even if you set one page to be invisible to unregistered users, that page will also be invisible to all other users, unless you explicitly state that others may see it. The group problem should be simple: Unless the top page is the "Main" page, go to the page, go Settings -> Administer Page -> Rights: Page & Children There you can explicitly set group access rights. If your top page is "Main" or another page containing technical subpages, only set the Viewing permissions to the Page, NOT its children. No anonymous access can be set on Administer Wiki -> Users & Groups -> Rights in a checkbox labeled "Prevent unregistered users from viewing pages..." To remove the Sandbox, simply set the top pages viewing permissions to "denied" on unregistered users, that should remove it from the view of all others as well. For the rest, check Administer Wiki -> Extension Manager -> Installed Extensions for the etension you want to remove, and remove it with "uninstall". Word of warning, though, this CAN break your layout, as some extensions seem to have a greater effect on the default pages than expected. Good Luck ;)