For an extra boost of speed, almost all these things, and much more, can be automated using Windows Deployment Services (WDS) for installing new systems. WDS can perform the entire setup and automatically join the new system to the domain without lifting a finger, other than making sure PXEBoot is first in the boot order. The domain policy can then set most everything else up, from the firewall policy, to Windows Update settings, on down to the automated installation of malware/virus software.