One of our admins was running my export and import permissions script, and I thought he had made an error when I looked at an ExtensionAttribute name. Nope. The difference was between the attribute name and the LDAP display name which you see in the Attribute Editor tab from the advanced view of Active Directory Users and Computers.
Here is a quick way to display the name, admin display name and LDAP Display name for the attributes in your AD schema:
< #requires -module ActiveDirectory Requires -version 3 Alan Kaplan 12/2/2018 based on https://blogs.technet.microsoft.com/exchange/2012/01/17/~ custom-aka-extension-attributes-in-exchange-2010-sp2-and-their-use/ #> #List of properties to search for and to later display $PropList = "Name","adminDisplayName","lDapDisplayName" #Splat parameters for Get-ADobject $Props = @{ SearchBase = (Get-ADRootDSE).schemaNamingContext filter = {adminDisplayName -like "*"} Properties = $PropList } Get-ADObject @props | Select-Object $PropList | sort-object name | out-gridview -Title "Schema Attributes" -Wait