If you write to the Policies area with a remote admin script then you are basically using a poor-man's GPO. Not going to say it cannot or should not be done throught KiX, but if GPOs are available to use through Active Directory, then that is the route I would go.

I would limit to KiX, only that which cannot be done by GPO.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.