Critical Failures: Syntax Errors, Missing Dependencies, and MSAL Assembly Conflicts

[Ryan-Adams57]

A spot check of approximately 12 scripts in this repository revealed a failure rate of roughly 75%. Issues range from fundamental PowerShell syntax errors to complex DLL version conflicts. It is recommended to withhold these scripts from general use until these stability issues are addressed.

1. Syntax & Parser Errors (Script 00)

Missing Closures: Multiple unclosed try blocks, foreach loops, and if statements result in ParseException.

Reserved Characters: Unquoted ampersands (&) in Write-Host strings (Line 250) trigger parser errors.

Missing Blocks: Try statements are missing required Catch or Finally blocks.

2. Missing Module Dependencies (Scripts 01, 02)

Error: The term 'Get-MgSubscribedSku' is not recognized.

Cause: The scripts assume Microsoft.Graph is a monolith.

Fix: Explicitly require and import Microsoft.Graph.Identity.DirectoryManagement.

3. MSAL/Broker Assembly Conflicts (Scripts 03, 04, 16)

Error: Method not found: '...BrokerExtension.With Broker...'

Context: Occurs during Connect-ExchangeOnline.

Cause: A version mismatch in Microsoft.Identity.Client.dll loaded into the PowerShell session, often caused by conflicting versions between the Graph and Exchange modules.

4. Authentication Failures (Script 51)

Error: InteractiveBrowserCredential authentication failed.

Context: Failure to launch or complete the OAuth2 flow even when run with Global Admin privileges in an elevated session.

Environment Tested

Privilege: Admin PowerShell / Global Admin Account

Machine: Clean Environment

[Ryan-Adams57]

Verification update (as of 2026-01-28 main):

I re-reviewed all 76 scripts (00-75) for the problems reported here. Summary: 75 of 76 pass structural checks (balanced braces/parentheses/brackets, matched try/catch/finally, no unquoted ampersands in Write-Host).

Confirmed resolved:

• Script 00 - syntax/parser errors and the unquoted & at old line 250 are gone.
• Scripts 01/02 - now import Microsoft.Graph.Identity.DirectoryManagement before calling Get-MgSubscribedSku.
• Script 51 - no longer uses the failing InteractiveBrowserCredential flow; connects via Connect-MgGraph -Scopes.

Still outstanding:

• Script 13 (13-Get-M365GuestUsersAuditReport.ps1) - still has a parse-breaking error. The module-check loop (lines ~79-97) is followed by an orphaned block (lines ~99-113) with three unmatched closing braces, a catch with no try, and an else with no if. This throws a ParseException on load. Fix: remove the orphaned remnant (or fold the install logic back into the loop with balanced blocks).
• MSAL/broker conflict (scripts 03/04/16) - syntactically sound, but the Microsoft.Identity.Client.dll version mismatch during Connect-ExchangeOnline is a runtime/DLL-load-order issue. Recommend disabling the WAM broker and/or documenting that Exchange Online should be connected before Microsoft.Graph in the same session.

Recommend keeping this issue open until Script 13's syntax is repaired.