• Evidently it's a limitation of the SAM Account Name attribute in order to be backwards compatible with older clients - http://msdn.microsoft.com/en-us/library/ms679635.aspx.