There are many ways to do this, which is a good thing and a bad thing

I like the script Aaron suggested, and it could certainly help. Here is a repo with a bunch of example profiles to do stuff in the registry, ADMX etc - https://github.com/helmlingp/WS1UEM_Profiles

Phil