Controlling Internet Explorer Settings

I’m supporting an environment of about 4000 users, and have been given the task to come up with the best way to control the internet explorer settings on a users workstation. My first choice would be using group policy, but just wanted to know if anyone is using another schema or a hybrid(ie-group policy and IEAK) configuration to control internet explorer settings.