So I did this:
Built image on workgroup from SCCM, with administrator password set
Logged in as administrator
Ran Get-AppxPackage *3d* | Remove-AppxPackage to delete all the packages I di not want
Ran Remove-AppxProvisionedPackage -PackageName Microsoft.Zune.xxx333.444.xxxx (etc) for each package I didn't want.
And Syspreped
Test now is what will a new user get when they sign in.