When an OU contains illegal LDAP characters, they are not escaped and cause the import script to halt. To reproduce, add a slash to an OU name and run a full import. Using an example OU of "OU=This/That,DC=domain,DC=com", the value for $rootDN in Get-OrganizationalUnits should be "OU=This/That,DC=domain,DC=com".