MSI deployment
Centralize the distribution of the Client Application to your Team Members.
The MSI package does not grant per-user update capabilities. Updates require either admin privileges or redeployment via management tools.
What is MSI?
MSI stands for Microsoft Software Installer. It is a Windows Installer format that uses the Microsoft Windows Installer service to install, maintain, and remove software applications on Windows operating systems. MSI packages define the structure and logic of the installation process, and can be customized using parameters or transforms.
This guide is applicable to Microsoft Intune, Active Directory, and other deployment tools that support MSI packages.
Deployment options
This MSI package can be deployed using various tools and methods, depending on your environment. Common options include:
Using msiexec via script or command line (e.g., for testing or manual installation)
Domain policies with MST transforms (e.g., created with ORCA)
Microsoft Intune, System Center Configuration Manager (SCCM), or other modern deployment tools that support MSI distribution
Optional arguments
The MSI installation includes 3 optional arguments to optimize the setup.
AUTO_UPDATES
This argument can be set to true or false.
Default value for the Windows Application is true.
If auto updates are set to true and an update is available, the Application will show you a modal that allows you to start installation immediately.
If auto updates are set to false and an update is available, the Application will notify you about the update and ask you to contact your administrator for installation.
DEFAULT_PROTOCOL
This argument can be set to openvpn or ikev2.
The GoodAccess Application allows you to use these two protocols.
Default protocol for the Windows Application is openvpn.
For a persistent connection, for example an RDP server, we recommend you to set openvpn as your default protocol.
PERSISTENT
This argument could be set to true or false.
Default value for the Windows Application is false.
If persistent is set to true, and you were previously connected, the Application will connect you immediately after system startup and will keep you connected even while you are logged out of your Windows account.
If persistent is set to false, the Application will connect you after you sign in to your Windows account. If you lock your device or log out of your Windows account, the Application will disconnect you.
MSIEXEC
Open Command Prompt with administrative privileges (Run as Administrator). Then, use the msiexec command followed by the /i argument to specify the MSI package path, and end with /qn for a silent installation. You can also include optional arguments to further customize the installation as needed.
msiexec /i "C:\Path\To\GoodAccess_Setup_4.6.3.msi" AUTO_UPDATES="false" DEFAULT_PROTOCOL="openvpn" PERSISTENT="true" /qn
Domain policies (MST with ORCA software)
Open the MSI package with the ORCA software and create a new transform by clicking Transform > New Transform.
To set Optional arguments, switch to the Registry page.
Click Transform > Generate Transform to create the MST transform for your domain deployment.
Last updated
Was this helpful?