Wonder if someone captured their MSI and forgot to remove their personal cruft from it... Because I can't think of a single reason why a Windows update would touch Normal.dotm deep in a user folder.
Once had something similar where I ran "discover" to create an MSI and left some temporary setup files in the downloads folder. Tested, it worked. Tested on other machines, it worked. Pushed out to a handful of users via group policy, it worked. Rolled it out - suddenly everyone was pushing a 100Mb setup executable back to their profiles...
Biting the hand that feeds IT
