Just a quick one, to remind you that there are ways you can have a dialog with users about tightening security controls. We're beating the drum about Flash dying a death, and haven't included it in our image since the Great Analytics Fiasco of 20.0.0.235.
SetupAssistant.app has many fun hidden dot files in /var/db/ and Pepijn Bruienne (@bruienne) has found another good one: /var/db/.MBSkipWiFiSetupIfPossible This dot file will make SetupAssistant skip the WiFi setup portion of the setup in some cases.
If you are in an AD environment and computer names come from somewhere else in your organization, it may be inconvenient when trying to quickly prepare a new machine. DeployStudio has a form workflow step to set some information you'd like customized for the computer, including the local name(for Bonjour) and computer name(for Apple Remote Desktop).
Location Services is an important part of OS X, but it is not obvious on how to enable it without going through the System Preferences GUI. The preference that controls it is not in /Library/Preferences, and due to cfprefsd it is hard to find.
Charles Edge has an article posted about testing memory on Apple computers from the command line.
Installing printers via lpadmin on OS X can be a pain, especially if you do not know the names of the specific options you need for the printer (Duplex, Finisher, etc). You can dig through the .ppd if you'd like, but this is not as helpful as you might hope.
Apple Software Restore (ASR) has some hidden documentation that reveals a few command line options which were previously unknown to most. A post on jamfnation led to some discussion on ##osx-server about an undocumented ASR command.
Noel Alonso has a post outlining one way you could easily delete a machine out of Active Directory using ldapsearch and ldapdelete. This script could easily be modified and changed to do various other things, such as passing the hostname in as an argument or doing a different action upon the machine.
Kyle Crawford has an interesting post that covers reloading LaunchAgents while a user is logged in without requiring them to take action (Log out/in, reboot, etc).
Apparently you can set the default boot volume right from the EFI Boot Disk Selector. Rich has the details over on his blog.
