The best way to roll out and manage IE is with the IEAK. While it includes policy style ADM files, it has its own implementation of them. Anyone that uses policies however can rip the ADMs and include them in their system policies at logon.

Now, if you're running AD, then GPOs are your friend.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.