[mod]

You could update it to report when it had to actually switch it back, and perhaps find the source of the problem.

[foepys]

99% sure it's just a group policy that somebody switched on because "I don't want users to delete config files by accident and call me".