I absolutely would have expected that the API exists to do this w/o human intervention. And given Windows, A way to do it via Group Policy & Active Directory.

I'm a strong believer, however, in making sure the user has visibility and control into it, so both methods (manually add/remote/check status & API) ought to be available.