report/security/report security check defaultuserrole
From MoodleDocs
The default role for all users should normally be set to Authenticated user. If it is set to Student then the result is that all students are enrolled on all courses.
See also
- Using Moodle Security and Privacy forum