We investigated further and found in Event Viewer that on July 20th around noon a new version of Java (8 update 101) was installed on the box and apparently I'd done it (or it was done with my User ID). However, we know that I didn't do it, since I was on vacation in Yellowstone National Park that day without internet! My User ID is an AD account that has Admin privileges, but is named "smmccants" and does not have a shared password. I did have a session running on the server (I usually disconnect rather than logout).