[foepys]

99% sure it's just a group policy that somebody switched on because "I don't want users to delete config files by accident and call me".