I don't think there's a pat answer to this. Whether you're talking about changing something on a computer, either intentionally or unintentionally, or leaving the milk out on the counter, some people just won't fess up to what they did. Have you ever known anyone who was involved in a traffic accident, one that was totally their fault, but there was always something or someone else to blame? For a person to take full and total responsibility for themselves, their actions, and their outcome is getting rare indeed.
But on the bright side, there are those users who will say, "I don't know what I did, but I must have done something. Can you fix it?" And these are the ones who will help you retrace their own steps.
However, what I usually say in situations such as the ones you asked about usually falls along these lines, depending on who it is and what the problem is:
It's not possible for something to change on its own. Someone or something has to change it, whether that be a person, a virus, another program, a downloaded email, or something. I'm just looking for those potential "somethings" to help me narrow it down.
Or if it gets to bee too much of a mysterious "head scratcher", I might say, If I can't trouble shoot and fix a problem within the first 30 minutes, It's my policy to just redo the whole thing from scratch - format the drive and reload the operating system and the programs because it's more time efficient. You did back up all your personal stuff, didn't you? (This might jog a person's memory real fast.)
Good luck.