If you image a device with the LANDESK agent installed (even a small part), the CTOS will set Provisioning to 'restart' itself when in Windows using the C:\Program Files (x86)\LANDesk\Shared Files\cbaroot\actions.ini .
The actions in this .ini file are done when the CBA8 service starts... When just stopping and removing the service, you left to much on the filesystem, fooling CTOS to think there is an agent, while that agent never started...
Frank