When starting the PC, do not connect to internet (WiFi or cable) until you reach the desktop. (AKA Don't log into Microsoft)
Don't use a password for initial generic username and don't use the same login name as the user will ultimately use.
Uncheck Inking & typing, Tailored experiences and Advertising ID in Privacy Settings
Not Now for Cortana
As soon as you reach the desktop, connect to internet
Set time zone to Central Time
Disable hibernation unless user explicitly needs it ( powercfg /h off at elevated command prompt)
Disable Write debugging information under Advanced System Settings -> Startup and Recovery
Rename the PC to something descriptive and reboot
Check for updates in Windows Updates
Check windows activation
Run intel driver update (Declining Intel Computing Improvement Program)
Update BIOS if possible
If joining domain: Join PC to domain remembering to add Domain Users to Administrators BEFORE reboot.
If setting up GCPW remember to add Everyone to Administrators (In Windows Home, use lusrmgr.exe) BEFORE reboot and install regkey.
Add Computer, User's Files, Network and Control Panel icons to user desktop.
Set desktop icons to auto arrange
Hide Cortana Button, Task View Button and Meet in tooltray
For Slower PCs / PCs used mostly for RDP, uncheck 3 x Animate and 3 x Fade options in Performance Options->Visual Effects
Enable remote desktop (if needed), add user to users allowed to log in remotely list and check windows firewall has RDP allowed.
Install Google Chrome, pin it to tooltray. Set Chrome as default browser and login to google identity.
Unpin Edge, Store and Mail Icons from ToolTray and delete Edge Desktop Icon.
Unhide tooltray icons on higher resolution displays
Turn off News and Interests
Dismiss security warnings requiring sign in.
Set power button to function to power down PC
Install Google Drive for Windows if needed.
Install Cisco Duo (duo.shadowtechs.com)
Set wallpaper
Install Microsoft Office if applicable via incognito window, recording keys in info sheet if applicable.
Install Acrobat Reader/Acrobat or Bluebeam as needed, recording keys in info sheet if applicable.
Run Windows Debloat Script (REMOVE ALL BLOATWARE, DISABLE CORTANA, DISABLE EDGE PDF, UNINSTALL ONEDRIVE, REMOVE BLOATWARE REGKEYS)
Delete initial setup user if possible.
Empty Recycling bin