@hammerc807 I actually never use sysprep and just deploy golden images. We do that exactly, the images are not domain joined and completely local workgroups and no AV installed.
Once imaged to a new laptop, we rename hostname, join domain and add AV and for some reason have issues with VPN
