You could script it, or you could configure a custom security template and use SECEDIT to apply it to affected machines. That can get pretty ugly though, so I would be more likely to script it.
________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator