AD Spoke v2 – Account expiration date showing one day earlier in AD Account tab

[SubaP_1]

Hi Community,

I am using Active Directory Spoke v2 – Update Object Expiration action in ServiceNow to extend the expiration date of an existing AD account.

For example, the requested account expiry date is 29 October 2026.

After executing the action, the values in Active Directory are displayed as follows:

• Attribute Editor → accountExpires: 29 October 2026 12:00:00 AM
• Account tab → Account expires → End of: 28 October 2026

Please refer to the attached screenshots.

Based on the AD behavior, the expected result for an expiry date of 29 October 2026 is:

• Attribute Editor → accountExpires: 30 October 2026 12:00:00 AM
• Account tab → Account expires → End of: 29 October 2026

Could someone please advise on the correct way to implement this using AD Spoke v2?

Specifically:

1. Is Update Object Expiration the correct action to use for extending an existing user's account expiration date?
2. If the requested expiry date is 29 October 2026, should 30 October 2026 be passed to the Update Object Expiration action so that the AD Account tab displays 29 October 2026?
3. Alternatively, is there another AD Spoke v2 action that should be used to update the accountExpires attribute directly?
4. Which AD attribute/value should be updated to ensure the Account expires date displayed in the AD Account tab exactly matches the expiry date requested in ServiceNow?

The requirement is to retain 29 October 2026 as the requested expiry date in ServiceNow and have the AD Account tab also display 29 October 2026.

Any guidance on the recommended approach would be appreciated.

Thanks in advance!