We detected some privilege escalation activity in Active Directory coming from our Laserfiche server (the server's AD object, not the service account LFDS uses to synchronize Active Directory). Is this normal behavior? Has anyone else experienced this? What is doing this, and can I disable it somehow?