I’d look into using LGPO for this. See Local Group Policy Management - LGPO.exe updated to v3
And Microsoft released v2.2 of LocalGPO Utilities