I found a semi solution to this. If I add the machine off the domain, then add it after using Smart Deploy the domain accounts don't have the issue. The initial local account still always has the issue.
I am having this same issue. Not quite to the extent as Palle, but I do have 2. Also Windows Defender seems not to be able to load. However it will load in the VM. Defender is the only program that seems to show after I remove the downloaded Bloat.