I've *finally* got most of my New Machine Build Procedure Set working well, but the main thing that I've not got a handle on is removing pre-installed AV. Most HP and Dell machines come with Trend, Norton, or McAfee and I just can't figure out how to remove them. Also, having a suite of AV removers makes it easy when changing a client's AV.

Note that you can use WMIC  to pull the uninstallation ID for ESET and MSSE, and they succumb to Kaseya without a fight.