GPO/Script setting screen Resolution to all domain

As splattne correctly points out, you can hide the Display Settings tab using policy. In AD Group Policy, it's under

User Configuration > Policies > Administrative Templates > Control Panel > Display > Hide Settings Tab

However, all this does is exactly that: hide the settings tab. It will not stop advanced users from changing the resolution, especially if you have a tray application or shell extension installed by your graphics card driver that allows users to do this.

Unless someone has a better method, I would add the AD group policy above, and uninstall or disable or otherwise lock down any Intel/ATI/NVidia application that allows users to change the resolution. This isn't bulletproof, but it should stop all but your most technical users.

A truly bulletproof solution to preventing resolution changes under non-administrator accounts might interfere with certain fullscreen applications.

Windows 8+ no longer allow these settings to be changed via registry to prevent applications from hijacking preferences. You now have to use specific GPO to set a defaults template, check this article: http://blogs.technet.com/b/mrmlcgn/archive/2013/02/26/windows-8-associate-a-file-type-or-protocol-with-a-specific-app-using-a-gpo-e-g-default-mail-client-for-mailto-protocol.aspx#pi86646=4

Basically you need to export settings from a template computer and then apply that XML using GPO. I was able to verify this works on Windows 8.1 and 10, also works to modify the XML to remove entries you don't want pushed.