Yeah! Tech Lockdown makes this easy. https://www.techlockdown.com/apple-config-generator