Nail > Head > Hammer.

FanacooL Group policy will allow you to implement the settings you want. You will still have to add the users to the group through AD, but you will have to apply the settings in GP.