We're using Jamf, and it is pretty decent. With recent changes to permissions in macOS, a solution like Jamf will be the only way you can actually control certain settings. Apple is no longer content with merely ignoring professional users, but is now actively trying to eliminate them.
I think that that actually started long ago.
10.12.x is much worse that what came before. There are a significant portion of system level settings that you cannot touch even as root.
