We've been noticing that on one of our development servers that the Authentication settings has been mysteriously been changing from Anonymous to Windows Authentication and the "Execute Permissions" has been changing from Scripts Only to None without anyone admitting it and having only a small number of people who have the access to do it.
Short of intentional sabotage, which I doubt, has anyone ever seen anything like this?
Could it be the automated application of a group policy?