AD Permissions

Hello, I would like to know how a fresh install of Manage Engine, when running as a server is able to modify domain groups when I have never provided authentication information?