This is how I do things
I have my standard image - most of the company uses this.
Then after I join the computers to the domain I drag them to a specific OU.
In PDQ Deploy, I have schedules setup that are linked to PDQ Inventory if computer is part of this OU and they are missing let's say "anti-virus" or "finance application". Automatically Deploy it with heartbeat feature.