Yep that's exactly what I did. I had it run as the SYSTEM account and delayed it to run after 15 minutes.
Here's the following script I used. I added a check to exclude it from stopping the services if I logged into the provisioning VM as our provisioning account too.
$services = "AppReadiness", "AppXSvc"
if ( (Get-WmiObject -Class Win32_Process -Filter 'Name="explorer.exe"').GetOwner().User -ne "OurProvisioningAccount" )
{
foreach ( $service in $services )
{
if ( Get-Service -Name $service -ErrorAction SilentlyContinue )
{
Stop-Service $service -Force
}
}
}