You can run the following command to disable the firewall: netsh advfirewall set currentprofile state off
You could also use thenetsh advfirewall command to properly configure the firewall.
Personally my firewall is off on my captured image (which I know is a terrible practice) and get's turned on and configured by a GPO in AD.
You can also do this in LANDesk, but individuals in our organisation are more comfortable with AD.
I use provisioning template which works okay in LDMS 9 for HII both in XP and 7 (Seemed to work better in 8.8 for XP anyways) no real OSD experience so I can't really comment on the OSD question.