After installing a supported version of Authentication Services (Version 220.127.116.1154 and up) on OSX 10.11 some symlinks configured in group policy are not applying. The following error is seen when running "vgptool apply":
CSE: Unable to create symlink( /usr/bin/vastool-->/opt/quest/bin/vastool )
Error was 1, Operation not permitted
1) Disable Rootless feature. (Contact Vendor for instructions).
2) Modify the user path rather then symlink into something that's already in the path.