What guide have you been given? I haven't spent a lot of time in the last few months with this but it's going to ramp up again.
At the minute, I'm using what I think is the original guide which was a batch file that you need to supply machine and antitamper password for.
I did a quick look last week and saw another doc, with --goldenimage tags on it but I didn't think it worked in the quick test I did.
There was another issue I found about 12mths ago with AppVolumes and I needed to supply a snapvol.cfg for sophos to play nice.
But yeah, more testing needed as I'm stuck with it