Anyone running Cisco AMP (Cisco Secure Endpoint) on CVAD with MCS? I see lots of documentation out there. Not sure what to follow. Can anyone point me in the right direction? Not sure if this is still valid - installer.exe /R /S /goldenimage 1

That is the right code, however you will need to remove and reinstall it as part of your maintenance image, or change the startup process to not actually execute Amp on your maintenance image name. I found the uninstall and reinstall was the easiest method, because then the AV team could drop the latest version on a share and I could automate it as part of the update and sealing process.