Thanks for raising this here. What workstations do you use? Are they VMWare VDIs, AWS Workspaces, Azure VDIs, desktops/laptops or special interfaces to login?
Is there any software that the remote agent (employee?) needs to check-in/check-out before they start work. ?
The reason I'm asking is, we need to have a foolproof check point so that we check that and suppress the alerts. Any hints you think can be used for our software to check while login will be helpful.