GPA should temporarily create the Symbolic Link rather than creating it as a permanent object in the Sysvol folders. Or at least provide an option for to Delete the link rather than only the option to Create the link when required. This way there is not a permanent 'NetIQ' object in the customer Sysvol folder. In one environment this sybmolic link causes the customers Active Directory backup/restore software to crash when it encounters the symbolic link since this is not a standard object that is found in the Sysvol folders.