I've just started playing with SQL Express and I'm pleasantly surprised to find that the new sqlcmd utility has the ability to use parameterised queries. Minor thing but very useful!

UPDATE: Now I just need to find out how to test whether a parameter has been supplied or not...