Can't you use a config profile and enroll it ?