<div>
As far as your other question about Domain admins altering the info, here is a useful read<br />
<br />
<a href="http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2012/AdminTips/ActiveDirectory/how-know-when-object-was-created-and-changed-active-directory.html" rel="ugc">http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2012/AdminTips/ActiveDirectory/how-know-when-object-was-created-and-changed-active-directory.html</a>
</div>


As far as your other question about Domain admins altering the info, here is a useful read

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2012/AdminTips/ActiveDirectory/how-know-when-object-was-created-and-changed-active-directory.html [http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2012/AdminTips/ActiveDirectory/how-know-when-object-was-created-and-changed-active-directory.html]

<div>
Glad I could help, thanks for the feedback.
</div>


Glad I could help, thanks for the feedback.

<div>
I'm glad I could assist as well. &nbsp;Thank you for the points.
</div>


I'm glad I could assist as well.  Thank you for the points.

<div>
<div class="content wysiwyg-content">
I am trying to understand a control our clients have in regards to user creation monitoring in AD. They want to implement a control that will notify a specific team with the complete list of new accounts created during the last month. My question is the following: &nbsp;Can I consider this report complete if I get it from AD, or is there any risk that Domain admins can alter this information in the AD data set? I am not concerning about the report being changed during transmission, only at the source. &nbsp;Please let me know if any further details are required. &nbsp;Thanks in advance!
</div>
</div>


I am trying to understand a control our clients have in regards to user creation monitoring in AD. They want to implement a control that will notify a specific team with the complete list of new accounts created during the last month. My question is the following:  Can I consider this report complete if I get it from AD, or is there any risk that Domain admins can alter this information in the AD data set? I am not concerning about the report being changed during transmission, only at the source.  Please let me know if any further details are required.  Thanks in advance!

AD Reports

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.