Powershell/AnalyzeAD.ps1 at master · artemkupryuhin/Powershell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
Function SendEmail ($Subject,$Body) {
# smtp server
$emailSmtpServer = "str.ukrcatalog.com"
$emailSmtpServerPort = "587"
# recipient
$emailFrom = "it-support@ukrcatalog.com.ua"
$emailTo = "admin@ukrcatalog.com.ua"
# message
$emailMessage = New-Object System.Net.Mail.MailMessage( $emailFrom , $emailTo )
$emailMessage.Subject = $Subject
$emailMessage.IsBodyHtml = $true
$emailMessage.Body = $Body
# client
$SMTPClient = New-Object System.Net.Mail.SmtpClient( $emailSmtpServer , $emailSmtpServerPort )
$SMTPClient.Send( $emailMessage )
}

$ExcludeListAccount = @(

    "SystemMailbox{1f05a927-50f3-4e10-a204-cae6a05d3fb4}",
    "SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}",
    "SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}",
    "DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852}",
    "FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042",
    "Guest",
    "krbtgt",
    "mailer",
    "EXCHANGE$",
    "SM_42a3872682a84ca5a",
    "SM_42a3872682a84ca5a",
    "SM_8f186941ed9244dc9",
    "SM_34771bbff8464169b",
    "SM_c351df776da54e00b"
)


$linenumber1 = 1

#Search for accounts that haven't signed-on for 30 days
$data1 = Search-ADAccount -AccountInactive -TimeSpan 30.00:00:00 | Where-Object { $_.Samaccountname -notin $ExcludeListAccount } |
         ForEach-Object { New-Object psObject -Property @{'LineNumber'=$linenumber1;'Samaccountname'= $_.Samaccountname; 'ObjectClass' = $_.ObjectClass; 'Lastlogondate' = $_.Lastlogondate };$linenumber1 ++} |
		 Select-Object	@{Name='RowNum';Expression={$_.LineNumber}},
						@{Name='Samaccountname';Expression={$_.Samaccountname}},
						@{Name='ObjectClass';Expression={$_.ObjectClass}},
                        @{Name='Lastlogondate';Expression={$_.Lastlogondate}}

$linenumber2 = 1
#Search for disabled accounts
$data2 = Search-ADAccount -SearchBase "DC=ukrcatalog,DC=com" -AccountDisabled | Where-Object { $_.Samaccountname -notin $ExcludeListAccount } |
         ForEach-Object { New-Object psObject -Property @{'LineNumber'=$linenumber2;'Name'= $_.Name; 'Lastlogondate' = $_.Lastlogondate };$linenumber2 ++} |
		 Select-Object	@{Name='RowNum';Expression={$_.LineNumber}},
						@{Name='Name';Expression={$_.Name}},
                        @{Name='Lastlogondate';Expression={$_.Lastlogondate}}

$linenumber3 = 1
#Search users created last 7 days
$When = ((Get-Date).AddDays(-7)).Date
$data3 = Get-ADUser -Filter {whenCreated -ge $When} -Properties Name, whenCreated |
         ForEach-Object { New-Object psObject -Property @{'LineNumber'=$linenumber3;'Name'= $_.Name; 'whenCreated' = $_.whenCreated };$linenumber3 ++} |
         Select-Object	@{Name='RowNum';Expression={$_.LineNumber}},
						@{Name='Name';Expression={$_.Name}},
                        @{Name='whenCreated';Expression={$_.whenCreated}} |
         Sort-Object whenCreated

$linenumber4 = 1
#Search users are member of the Domain Admins group
$sid=(Get-ADDomain).DomainSid.Value + '-512'
$data4 = Get-ADGroupMember -identity $sid |
         ForEach-Object { New-Object psObject -Property @{'LineNumber'=$linenumber4;'Name'= $_.Name; 'SamAccountName' = $_.SamAccountName; 'objectClass'=$_.objectClass};$linenumber4 ++} |
         Select-Object	@{Name='RowNum';Expression={$_.LineNumber}},
						@{Name='Name';Expression={$_.Name}},
                        @{Name='SamAccountName';Expression={$_.SamAccountName}},
                        @{Name='objectClass';Expression={$_.objectClass}}|
         Sort-Object Name

$fragments = @()

#Insert logo
$ImagePath = "D:\IT\Install\logo_ukrcatalog.png"
$ImageBits =  [Convert]::ToBase64String((Get-Content $ImagePath -Encoding Byte))
$ImageFile = Get-Item $ImagePath
$ImageType = $ImageFile.Extension.Substring(1)
$ImageTag = "<Img src='data:image/$ImageType;base64,$($ImageBits)' Alt='$($ImageFile.Name)' style='float:left' width='250' height='120' hspace=10>"
$fragments+= $ImageTag
$fragments+= "<br><br>"

$fragments+= "<h1>Accounts that haven't signed-on for 30 days</h1>"
[xml]$html = $data1 | convertto-html -Fragment

$fragments+= $html.InnerXml
$fragments+= "<h1>Disabled accounts</h1>"
[xml]$html = $data2 | convertto-html -Fragment

$fragments+= $html.InnerXml
$fragments+= "<h1>Users created last 7 days</h1>"
[xml]$html = $data3 | convertto-html -Fragment

$fragments+= $html.InnerXml
$fragments+= "<h1>List Domain Admins</h1>"
[xml]$html = $data4 | convertto-html -Fragment

$fragments+= $html.InnerXml
$fragments+= "<p class='footer'>$(Get-Date -Format g)</p>"

$convertParams = @{
head = @"
<style>
body { background-color:#E5E4E2; font-family:Monospace; font-size:10pt; }
td, th { border:0px  black; border-collapse:collapse; white-space:pre; text-align: center; }
th { color:white; background-color:black; }
table, tr, td, th { padding: 2px; margin: 0px ;white-space:pre; }
tr:nth-child(odd) {background-color: lightgray}
table { width:95%;margin-left:5px; margin-bottom:20px;}
h1 { text-align: center; font-family:Tahoma; color:#6D7B8D; }
.alert { color: red; }
.footer { color:green; margin-left:25px; font-family:Tahoma; font-size:8pt; }
</style>
"@
body = $fragments
}

$BodyText = convertto-html @convertParams

#sendmessage_telegram  576450868 $BodyText

SendEmail "(Укркаталог) PS Report -  Analyze AD" $BodyText