Per the Microsoft KB for it, this only happens if Windows updates are installed before a user logs in for the first time. So basically re-images and especially VDI environments are at risk of this happening.