However sometimes someone will build a machine incorrectly or the SCCM client will break and then Windows Update kicks in and updates the machine which might end up with IE11 or other undesired ...