I recently updated to Build 5325, prior to the updated I did not have the Force Enrollment using Logon Script feature enabled. After the update it somehow enabled this feature changing the Logon Script field in Active Directory for 3000+ from its original entry to “ADSelfService_Enroll.hta” causing a major issue. I would like to know how and why this occurred when this feature was not enabled in the first place.

Any insight I can provide to my leadership team would be appreciated.