AD Reports

I am trying to understand a control our clients have in regards to user creation monitoring in AD. They want to implement a control that will notify a specific team with the complete list of new accounts created during the last month. My question is the following:  Can I consider this report complete if I get it from AD, or is there any risk that Domain admins can alter this information in the AD data set? I am not concerning about the report being changed during transmission, only at the source.  Please let me know if any further details are required.  Thanks in advance!
Andi Resuli MSc. (MCP)Senior System & Network AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

FOXActive Directory/Exchange EngineerCommented:
Andi,
You can use a basic powershell command to pull the data.

Open powershell as an administrator
(type) Import-module ActiveDirectory
(type) the below command
$When = ((Get-Date).AddDays(-30)).Date
Get-ADUser -Filter {whenCreated -ge $When} -Properties whenCreated
1
FOXActive Directory/Exchange EngineerCommented:
0
Nadav SolomonCommented:
If a user was created and deleted it wont show up looking for creation date of users, thats why you use audit which cannot be changed just deleted and then you will know it was deleted.
To make reports easily from active directory audit there are lot's of tools I like ad audit plus its really easy to understand and use, there's a trial, if audit is enabled in the domain you can use the trial to get your report.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Nadav SolomonCommented:
Glad I could help, thanks for the feedback.
0
FOXActive Directory/Exchange EngineerCommented:
I'm glad I could assist as well.  Thank you for the points.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.