The correct way to handle something like this would be DSC, at least the way you can actually set Local Policy correctly instead of just modifying the registry.