FWIW, I have a much shorter diskpart.txt file:
[CODE]select disk 0
select partition 2
extend[/CODE]

I just call it from the SetupComplete.cmd script:

[CODE]@echo off
diskpart /s C:\Windows\Setup\Scripts\diskpart.txt

del /Q /F C:\Windows\System32\Sysprep\unattend.xml
del /Q /F C:\Windows\Panther\unattend.xml
del /Q /F C:\Windows\Setup\Scripts\diskpart.txt

sc config “Sophos AutoUpdate Service” start= auto
sc config “Sophos Agent” start= auto
sc config “Sophos Message Router” start= auto[/CODE]

But, of course, I’m blessed with very consistent, almost homogeneous hardware.

A non-automated way to identify accounts I use is the free Inactive Computer Accounts tool from Solar Winds: [url]http://www.solarwinds.com/products/solarwinds_free_tools/[/url] . But the obvious limitation is that Solar Winds and AD are not aware of FOG, which means you would still have to manually pull the host records out of FOG.