That's what I do, I push this out with a GPO with additional parameters which do not allow our users from changing the configurations. GPO's only work with WIN2K and above clients and is dependent on Active Directory. Lot of shops are still on NT4 Domains....