I have compared the gpreult /h report.html line by line for a few users and dont see any GPO object that is exclusively applied to the problematic user account. We do have policy to add Macro trusted locations in User Config firm-wide, this is applied to everyone, compared the GPO/registry regarding this policy and nothing difference.
I dont have policy to block unmanaged add-in or enforce any add-in load behavior. Tried to put another test computer to the default Computer OU where only the default domain policy is applied. The issue still happens for the same user. I created a domain user by copying the problematic user account. The same issue did not happen to this newly created account.
Have also compared the HKCU\Software\Classes\CLSID, I dont see anything special. Mostly just Windows Application like paints or may Bloomberg, but other users also have the similar directories and values.
I am running out of ideas.