Have you investigated the Workstation GPO approach ? If there is no "canned/standard" setting for what your trying to set, you can always write a custom template for it. Of course, this would assume that all your "target workstations" are in a single (or a few) Workstation OU's and not scattered all over the place in AD.