How to keep Windows Desktop profile settings enforced?

[Ezechielus]

Hi, I am fairly new to WS1 and having some issues understanding the mechanics of the solution.

Scenario:
A Windows Custom Profile sets some registry keys via embedded ps1 script (in my case USB layered policy to whitelist some USB thumbs and block all the others). 

After the profile is applied an administrator changes/removes those registry keys. WS1 still shows the profile as applied.

How can I keep such settings enforced? (A baseline is not viable because such settings are not available).

Thanks.

[Ezechielus]

As a (not elegant) solution, I have wrapped the ps1 (that edits the registry keys) into an exe and with another ps1 script scheduled it as a Scheduled Task. The task will run every 30 minutes, and re-apply the registry keys if removed.

I now need to find a way to deploy with WS1, I am going to try with a Product.

But I really feel that such features (enforce profiles on a schedule, run apps on a schedule, etc.) should be native in WS1.