Well, if it's controllable through a group policy. Otherwise you'll quickly regress to myriads of registry key incantations. Some things take hours or days to figure out how to configure.