We decided to have our Apple computers joined to our Active Directory server so we have a little more control and our users have a little more continuity and features when using different machines. We also finally figured out how to set up a user template similar to Windows default user profile. A problem we ended up with was our user template had a blank password for the keychain access but we need our users to have their keychain password be the same as their login password. If the keychain passwords do not match, the keychain keeps popping up every time they need to use a password stored in the keychain.
To fix this you can simply delete the login.keychain file from the /System/Library/User Template/English.lproj/Library/keychains/ folder before a user logs in or you can just deleted the login.keychain from the /User//Library/keychains/ folder after the user has already logged in.
I just wanted to help with this problem before too many people got stuck with this like we did.
Leave me a comment if it worked for you or if you have any problems.