Create a profile which has all the necessary settings defined.
Then rename ntuser.dat to ntuser.man, which makes the profile read-only. User can change settings in the session but they will not be saved.
ntuser.dat can be found in the root of the profile folder.