Just an idea ;-)

Isn´t it posible to create a standard .profile that is stored in a central folder reachable for all users that is included in the .profile for all users?

So at anytime you make changes for all users you only have to change that file.

I´ve seen that on an AIX Box but I´ve no more access to that box so I couldn´t figure out how they exactly implemented this feature.
Probably they just start the standart .profile and included the user´s .profile to make sure the users the users aren´t able to bypass the standart .profile.

Has anybody an idea how to implement this correctly?