Hi Joey,
Seems to me that your recently deployed systems aren't getting your domain configuration as fast as desired, so, when your technicians try to connect, default agent configuration is still in place.
You could add this commands to your OS deployment (after agent is installed and environment variables refreshed):
ccnfcmda -cmd SetParameterValue -ps /itrm/rc/host/general -pn requirelocalconfirmation -v 0
ccnfcmda -cmd SetParameterValue -ps /itrm/rc/host/general -pn overrideconfirmatlogin -v 1
This will override local confirmation and confirmation when no one is logged in.
These configurations will be overwritten by your Domain configuration once correctly applied.
Rgds.
Sergio