It sounds like there's a market for Aaxnet's Fort Knox - A collection of tools to disinfect, lock-down and guard your Winders so nasties can't break in and steal your gold.
I'll keep looking around - I agree that someone should have come up with some scripts on how to do these things in a reasonably automated way. I'll let you know if I find anything. Otherwise, pick Andrew's brain. :-)
Oh, before I go:
Meanwhile - I'm experimenting on the notebook (now undergoing a second repartitioning - to see if.. once merely partitioned -still NTFS- but Not reformatted via fdisk: my assigned Extended Partition space (for dual-boot, natch) shall not be auto-wiped by the single-minded Restore set / on This try.
I don't think you'll be successful.
I have a T41 that has XP restore disks. When it was shipped, it came with a FAT32 partition. When the laptop is started for the first time [link|http://www.linuxquestions.org/linux/answers/Hardware/Installing_SuSE_9_0_to_dual_boot_on_an_IBM_ThinkPad_T41_with_XP|it runs a script] that converts the partition to NTFS, installs XP, creates the system "pre-desktop" restore partition, etc. It's a pain for people who want to run Linux on it because you need to figure out a way to keep that script from running if you want to keep the Win partition FAT32 (so it can be resized by most Linux distros without incident) and keep the pre-desktop partition (if you don't have the restore CDs - though they can be requested from IBM). If you ever run the XP system restore stuff from the pre-desktop partition on the disk, it'll restore everything to the state after that first boot - meaning all of the partitions will be reset to the original configuration, wiping out Linux, etc., in the process. At least that's my understanding - I've never done it. If it works differently for you, please report back. :-)
Cheers,
Scott.