The horizon agent wouldn't do this, you say physical machines, are they really full machines and not virtual machines not using a cloning procedure? If they are a real physical machines then I'd check for any group policy or something else that may be pushing something down to presist changes. I think its just a windows 10 feature, but look for things like

Unified Write Filter (UWF) feature | Microsoft Docs