One of security folks noticed that Solar Winds appears to occasionally write to our domain controller. Any idea why a write operation might be needed?