I build as a backup/restore from production and script it that way so I can repeat the process.
Be sure that sensitive information is scrambled or changed as part of your script.
Be aware of email addresses and other items which may need ot be tested, but you do not want going out to live users from the application.
I alter passwords from production to QA to ensure that there are no accidental connections from one to the other.