1. We upgraded plugins to latest versions as mentioned in Environment.
2. After plugins upgrade, in the configureSecurity page, we unchecked "Overall/RunScript" permission for the user( actually a service account which is also used as Bind DN )
3. Pushed on Save to save to configuration.
4. After saving the configuration, We could not login to Jenkins as the Bind DN account got locked.
5. when we investigate the cause of account lock,  the Bind Password got changed when saving the "Overall/RunScript" permission change.

We have not modified anything on AD setting, however the Bind password changed when saving the  Matrix-based security setting.

Note: The account used in Matrix-based security setting and AD setting for Bind DN is same.

We are not sure how the  Matrix-based security setting change affect Bind password change.

If you have some idea/information on the root cause of the issue, could you please share it with us?