TIL I learned that the account expiry date in AD is handled slightly differently between PowerShell and the AD U&C GUI tool. The GUI seems to use 23:59:59 whereas PowerShell uses 00:00:00; if you want PS to set the GUI expiry date for a Friday, you have to give it the date of the Saturday...