It would be recommended to capture the image with as little installed on it as possible, this will reduce the image size and the amount of time it takes to deploy.
You can then using the provisioning system deploy additional software to the device, thus ensuring that the needed software is present on the device. (Including SEP)
This would be the best way to get the machines imaged etc, as the additional software steps will make sure the software does not have any unique machine identifiers from capture.
Further information on Provisioning can be found here:
Setting up a custom Definition to ensure SEP is present.
I hope that helps with getting what you want done.