Clear-Host
If (-not (Get-Module -Name 'ActiveDirectory' -ErrorAction SilentlyContinue)) {
    Import-Module ActiveDirectory
}

# Get domain specific variables
$Domain = "contoso.com"
$DomainData = Get-ADDomain -Server $Domain
$DomainDistinguishedName = $DomainData.DistinguishedName
$DomainDNSRoot = $DomainData.DNSRoot
$DomainDC = $DomainData.PDCEmulator
$DomainNetBIOSName = $DomainData.NetBIOSName
$DomainNetlogonDir = "\" + $DomainNetBIOSName + "\NetLogon"
$AdminAccountsOU = "OU=Admins," + $DomainDistinguishedName
$DisabledAdminAccountsOU = "OU=Disabled," + $AdminAccountsOU
$ServiceAccountsOU = "OU=Service Accounts," + $DomainDistinguishedName

# Variable declaration
$ErrorActionPreference = 'Stop'
$WeekNumber = Get-Date -uformat %V
$ReportPath = "D:\Scripts\ICT-Administration\AD-SpecialAccounts-WeeklyReport"
$ReportName = "Week $WeekNumber - Weekly special accounts report - $DomainDNSRoot"
$ReportFile = $ReportPath + "" + $ReportName + ".html"

If ( -Not (Test-Path -Path $ReportPath)) {
    New-Item -ItemType directory -Path $ReportPath
}

## Disabled admin accounts
$ReportDisabledAdminAccounts = @()
$DisabledAdminAccounts = @()
$DisabledAdminAccounts = Search-ADAccount -Server $DomainDC -AccountDisabled -SearchBase $AdminAccountsOU

ForEach ($DisabledAdminAccount in $DisabledAdminAccounts) {
    $a1 = $null
    $a1 = ((Get-ADUser -Server $DomainDC -Identity $DisabledAdminAccount -Properties LastLogonDate).LastLogonDate)
    If ($a1) {
        $a1 = ($a1).ToString("dd-MMM-yyyy")
    } Else {
        $a1 = ""
    }

    $b1 = $null
    $b1 = ((Get-ADUser -Server $DomainDC -Identity $DisabledAdminAccount -Properties AccountExpirationDate).AccountExpirationDate)
    If ($b1) {
        $b1 = ($b1).ToString("dd-MMM-yyyy")
    } Else {
        $b1 = ""
    }

    $c1 = $null
    $c1 = (Get-ADUser -Server $DomainDC -Identity $DisabledAdminAccount -Properties "msDS-UserPasswordExpiryTimeComputed" | `
            Select-Object -Property @{Name = "ExpiryDate"; Expression = { [datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed") } }).ExpiryDate
    If ($c1) {
        $c1 = ($c1).ToString("dd-MMM-yyyy")
    } Else {
        $c1 = ""
    }

    $d1 = $null
    $d1 = ($DisabledAdminAccount.DistinguishedName).Split(",", 2)[1]

    $e1 = $null
    $e1 = (Get-ADUser -Server $DomainDC -Identity $DisabledAdminAccount -Property EmployeeID).EmployeeID

    $ItemDisabledAdminAccounts = [PSCustomObject]@{
        'Name'                     = $DisabledAdminAccount.Name
        'Enabled'                  = $DisabledAdminAccount.Enabled
        'Last Logon Date'          = $a1
        'Account Expiration Date'  = $b1
        'Password Expiration Date' = $c1
        'Employee ID'              = $e1
        'Account location'         = $d1
    }
    $ReportDisabledAdminAccounts += $ItemDisabledAdminAccounts
}

## Enabled admin accounts
$ReportEnabledAdminAccounts = @()
$EnabledAdminAccounts = @()
#$EnabledAdminAccounts += Get-ADUser -Server $DomainDC -SearchBase $AdminAccountsOU -Filter * -Properties * | Where-Object { $_.Enabled -eq $True -AND $_.Name -like "adm-*" }
$EnabledAdminAccounts += Get-ADUser -Server $DomainDC -SearchBase $AdminAccountsOU -Filter * -Properties * | Where-Object { $_.Enabled -eq $True }

ForEach ($EnabledAdminAccount in $EnabledAdminAccounts) {
    $a1 = $null
    $a1 = ((Get-ADUser -Server $DomainDC -Identity $EnabledAdminAccount -Properties LastLogonDate).LastLogonDate)
    If ($a1) {
        $a1 = ($a1).ToString("dd-MMM-yyyy")
    } Else {
        $a1 = ""
    }

    $b1 = $null
    $b1 = ((Get-ADUser -Server $DomainDC -Identity $EnabledAdminAccount -Properties AccountExpirationDate).AccountExpirationDate)
    If ($b1) {
        $b1 = ($b1).ToString("dd-MMM-yyyy")
    } Else {
        $b1 = ""
    }

    $c1 = $null
    $c1 = (Get-ADUser -Server $DomainDC -Identity $EnabledAdminAccount -Properties "msDS-UserPasswordExpiryTimeComputed" | `
            Select-Object -Property @{Name = "ExpiryDate"; Expression = { [datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed") } }).ExpiryDate
    If ($c1) {
        $c1 = ($c1).ToString("dd-MMM-yyyy")
    } Else {
        $c1 = ""
    }

    $ItemEnabledAdminAccounts = [PSCustomObject]@{
        'Name'                     = $EnabledAdminAccount.Name
        'Enabled'                  = $EnabledAdminAccount.Enabled
        'Last Logon Date'          = $a1
        'Account Expiration Date'  = $b1
        'Password expired?'        = $EnabledAdminAccount.PasswordExpired
        'Password Expiration Date' = $c1
        'Password Never Expires'   = $EnabledAdminAccount.PasswordNeverExpires
        'Employee ID'              = $EnabledAdminAccount.EmployeeID
        'Account location'         = ($EnabledAdminAccount.DistinguishedName).Split(",", 2)[1]
    }
    $ReportEnabledAdminAccounts += $ItemEnabledAdminAccounts
}

## Service accounts
$ReportServiceAccounts = @()
#$AllServiceAccounts = Get-ADUser -Server $DomainDC -Filter { Name -like "svc*" -or Name -like "srvc*" } -Properties Name, Enabled, LastLogonDate, PasswordNeverExpires, DistinguishedName
$AllServiceAccounts = Get-ADUser -Server $DomainDC -SearchBase $ServiceAccountsOU -Filter * -Properties Name, Enabled, LastLogonDate, PasswordNeverExpires, DistinguishedName

ForEach ($ServiceAccount in $AllServiceAccounts) {
    $a1 = $null
    $a1 = ((Get-ADUser -Server $DomainDC -Identity $ServiceAccount -Properties LastLogonDate).LastLogonDate)
    If ($a1) {
        $a1 = ($a1).ToString("dd-MMM-yyyy")
    } Else {
        $a1 = ""
    }

    $ItemServiceAccounts = [PSCustomObject]@{
        'Name'                   = $ServiceAccount.Name
        'Enabled'                = $ServiceAccount.Enabled
        'Last Logon Date'        = $a1
        'Password Never Expires' = $ServiceAccount.PasswordNeverExpires
        'Account location'       = ($ServiceAccount.DistinguishedName).Split(",", 2)[1]
    }
    $ReportServiceAccounts += $ItemServiceAccounts
}

## Computer accounts
$ReportComputerAccounts = @()
$AllComputerAccounts = Get-ADComputer -Server $DomainDC -Filter { Name -notlike "SS-DC*" } -Properties Name, Enabled, LastLogonDate, DistinguishedName

ForEach ($ComputerAccount in $AllComputerAccounts) {
    $a1 = $null
    $a1 = $ComputerAccount.LastLogonDate
    If ($a1) {
        $a1 = ($a1).ToString("dd-MMM-yyyy")
    } Else {
        $a1 = ""
    }

    $ItemComputerAccounts = [PSCustomObject]@{
        'Name'             = $ComputerAccount.Name
        'Enabled'          = $ComputerAccount.Enabled
        'Last Logon Date'  = $a1
        'Account location' = ($ComputerAccount.DistinguishedName).Split(",", 2)[1]
    }
    $ReportComputerAccounts += $ItemComputerAccounts
}



### Create report section : Build HTML report
$ReportHTML1 = $ReportDisabledAdminAccounts | Sort-Object 'Name' | ConvertTo-Html -Fragment -PreContent "<H2>Disabled admin accounts</H2>"
$ReportHTML2 = $ReportEnabledAdminAccounts | Sort-Object 'Name' | ConvertTo-Html -Fragment -PreContent "<H2>Enabled admin accounts</H2>"
$ReportHTML3 = $ReportServiceAccounts | Sort-Object 'Name' | ConvertTo-Html -Fragment -PreContent "<H2>Service accounts</H2>"
$ReportHTML4 = $ReportComputerAccounts | Sort-Object 'Name' | ConvertTo-Html -Fragment -PreContent "<H2>Computer accounts</H2>"

$Body = "
<!DOCTYPE html>
<html>
<head>
<style>
TABLE {
    border-width: 1px;
    border-style: solid;b
    order-color: black;
    border-collapse: collapse;
    white-space:nowrap;
}
TH {
    border-width: 1px;
    padding: 4px;
    border-style: solid;
    border-color: black
}
TD {border-width: 1px;
    padding: 2px 10px;
    border-style: solid;
    border-color: black;
}
TR:NTH-CHILD(odd) {
    background-color:#eee;
}
TR:NTH-CHILD(even) {
    background-color:#fff;
}
</style>
</head>
<body>
<H1>Week $WeekNumber - Weekly special accounts report - $DomainDNSRoot</H1>
<br>
$ReportHTML1
<br>
$ReportHTML2
<br>
$ReportHTML3
<br>
$ReportHTML4
</body>
</html>"

ConvertTo-Html -Title "Week $WeekNumber - Weekly special accounts report - $DomainDNSRoot" -Body $Body | Set-Content $ReportFile -Force
Start-Process -FilePath $ReportFile

# Mail report
$FromAddress = '<from email address'
$ToAddress = '<To email address 1>', '<To email address 2>'
$SMTPServer = '<SMTP sServer>'

$Subject = "Week $WeekNumber - Weekly special accounts report - $DomainDNSRoot"
Send-MailMessage `
    -From $FromAddress `
    -To $ToAddress `
    -Subject $Subject `
    -SmtpServer $SMTPServer `
    -Attachments $ReportFile