Thanks guys, met with Microsoft today and got some good feedback re the GPO's, one chalkenge we have is if you disable windows ipdates this also causes grief with Windows app downloads.
It's really just a new mindset; Microsoft went over the options for whether to image or not, and that just getting the base config abd putting a light touch on it (domain join, av, patching, SCCM client) is in fact a viable way to go and they have many clients do it.
My concern is with one of two techs they are not ready for the high cadence of updates/patches/firmware changes that will come with this new platform. They also told me windows 10 will have a 1 month update cycle (not just patches) so our client needs to start thinking different.
I'm not saying a gold image is not the way to go, just a lot less agile than i think is going to be required. Now I just need they to allow the tile apos to talk to Activesync
It's always fun dealing with the old boy mentality of we've always done it this way when introducing dusruptive technologies......surprisingly the client is very advanced in the cloud space...