MSI deployment
Centralize the distribution of the Client Application to your Team Members.
Last updated
Was this helpful?
Centralize the distribution of the Client Application to your Team Members.
Last updated
Was this helpful?
The MSI package does not grant per-user update capabilities. Updates require either admin privileges or redeployment via management tools.
MSI stands for Microsoft Software Installer. It is a Windows Installer format that uses the Microsoft Windows Installer service to install, maintain, and remove software applications on Windows operating systems. MSI packages define the structure and logic of the installation process, and can be customized using parameters or transforms.
This guide is applicable to Microsoft Intune, Active Directory, and other deployment tools that support MSI packages.
This MSI package can be deployed using various tools and methods, depending on your environment. Common options include:
Using via script or command line (e.g., for testing or manual installation)
Domain policies with MST transforms (e.g., )
Microsoft Intune, System Center Configuration Manager (SCCM), or other modern deployment tools that support MSI distribution
The MSI installation includes 3 optional arguments to optimize the setup.
This argument can be set to true or false.
Default value for the Windows Application is true.
If auto updates are set to true and an update is available, the Application will show you a modal that allows you to start installation immediately.
If auto updates are set to false and an update is available, the Application will notify you about the update and ask you to contact your administrator for installation.
This argument can be set to openvpn or ikev2.
The GoodAccess Application allows you to use these two protocols.
Default protocol for the Windows Application is openvpn.
For a persistent connection, for example an RDP server, we recommend you to set openvpn as your default protocol.
This argument could be set to true or false.
Default value for the Windows Application is false.
If persistent is set to true, and you were previously connected, the Application will connect you immediately after system startup and will keep you connected even while you are logged out of your Windows account.
If persistent is set to false, the Application will connect you after you sign in to your Windows account. If you lock your device or log out of your Windows account, the Application will disconnect you.
msiexec /i "C:\Path\To\GoodAccess_Setup_4.6.3.msi" AUTO_UPDATES="false" DEFAULT_PROTOCOL="openvpn" PERSISTENT="true" /qn
Open the MSI package with the ORCA software and create a new transform by clicking Transform > New Transform.
Click Transform > Generate Transform to create the MST transform for your domain deployment.
Open Command Prompt with administrative privileges (Run as Administrator). Then, use the msiexec
command followed by the /i
argument to specify the MSI package path, and end with /qn
for a silent installation. You can also include to further customize the installation as needed.
To set , switch to the Registry page.