Hi,
the latest beta release has a couple of new GPOs which should cover almost all the above requirements:
Regards, Stefan