LogoLogo
GoodAccess WebsiteRequest Free TrialDownload App
  • Getting Started
    • 1. What is GoodAccess?
    • 2. Architecture Overview
    • 3. Sign up for Free Trial
    • 4. Download App & Connect
  • 🖥️Configuration guides
    • Features
      • Zero Trust Access Control
        • Access Cards
        • Device Posture Check
        • Device Approval
        • Geo Restrictions
      • API Integration
        • API Reference
          • Members
          • Groups
          • Systems
          • Access Cards
          • Relations
          • Gateways
          • Logs
        • Acronis Integration
      • SIEM Integration
      • SSO/SCIM
        • Auth0
        • Cisco Duo
        • Google Workspace
        • JumpCloud
        • Microsoft Entra ID
        • Okta
        • OneLogin
        • Ping Identity
        • Universal (SAML)
      • MFA
      • Passkeys
      • MSI deployment
      • Threat Blocker
      • Custom Domain Blocking
      • DNS Management
      • Split Tunneling
      • Port Forwarding
    • Branch Connector
      • Cisco
      • Cisco Meraki
      • FortiGate
      • MikroTik
      • SonicWall
      • UniFi USG
      • Zyxel Nebula Control Center
      • Other supported routers and firewalls
    • Cloud Connector
      • AWS
      • Google Cloud
      • Microsoft Azure
      • Other Public Cloud providers
    • IP whitelisting
      • APACHE Web Server
      • AWS VPC
      • Azure (Office 365)
      • Google Cloud
      • Google Workspace
      • Magento
      • Microsoft IIS
      • NGINX
        • Domain
        • Subdomain
        • URL
      • OpenCart
      • PHP
      • PHPMyAdmin
      • Pipedrive
      • SalesForce
      • SSH server
      • WordPress
      • Zoho CRM
    • Linux
      • DEB repository
      • RPM repository
      • Manual installation
      • Linux Troubleshooting
  • 🆘FAQ & Troubleshooting
    • FAQ
      • Business
      • Technical
    • Troubleshooting
  • 📓Product Changelog
    • Windows
    • macOS
Powered by GitBook
On this page
  • What is MSI?
  • Deployment options
  • Optional arguments
  • AUTO_UPDATES
  • DEFAULT_PROTOCOL
  • PERSISTENT
  • MSIEXEC
  • Domain policies (MST with ORCA software)
  • Download
  • Changelog

Was this helpful?

  1. Configuration guides
  2. Features

MSI deployment

Centralize the distribution of the Client Application to your Team Members.

PreviousPasskeysNextThreat Blocker

Last updated 10 days ago

Was this helpful?

This feature is available in the Essential plan and higher.

The MSI package does not grant per-user update capabilities. Updates require either admin privileges or redeployment via management tools.

What is MSI?

MSI stands for Microsoft Software Installer. It is a Windows Installer format that uses the Microsoft Windows Installer service to install, maintain, and remove software applications on Windows operating systems. MSI packages define the structure and logic of the installation process, and can be customized using parameters or transforms.

This guide is applicable to Microsoft Intune, Active Directory, and other deployment tools that support MSI packages.

Deployment options

This MSI package can be deployed using various tools and methods, depending on your environment. Common options include:

  • Using via script or command line (e.g., for testing or manual installation)

  • Domain policies with MST transforms (e.g., )

  • Microsoft Intune, System Center Configuration Manager (SCCM), or other modern deployment tools that support MSI distribution

Optional arguments

The MSI installation includes 3 optional arguments to optimize the setup.

AUTO_UPDATES

This argument can be set to true or false.

Default value for the Windows Application is true.

If auto updates are set to true and an update is available, the Application will show you a modal that allows you to start installation immediately.

If auto updates are set to false and an update is available, the Application will notify you about the update and ask you to contact your administrator for installation.

DEFAULT_PROTOCOL

This argument can be set to openvpn or ikev2.

The GoodAccess Application allows you to use these two protocols.

Default protocol for the Windows Application is openvpn.

For a persistent connection, for example an RDP server, we recommend you to set openvpn as your default protocol.

PERSISTENT

This argument could be set to true or false.

Default value for the Windows Application is false.

If persistent is set to true, and you were previously connected, the Application will connect you immediately after system startup and will keep you connected even while you are logged out of your Windows account.

If persistent is set to false, the Application will connect you after you sign in to your Windows account. If you lock your device or log out of your Windows account, the Application will disconnect you.

MSIEXEC

This is a sample command. Update the file path, version, and optional arguments as needed.

msiexec /i "C:\Path\To\GoodAccess_Setup_4.6.3.msi" AUTO_UPDATES="false" DEFAULT_PROTOCOL="openvpn" PERSISTENT="true" /qn

Domain policies (MST with ORCA software)

  • Open the MSI package with the ORCA software and create a new transform by clicking Transform > New Transform.

  • Click Transform > Generate Transform to create the MST transform for your domain deployment.

Open Command Prompt with administrative privileges (Run as Administrator). Then, use the msiexec command followed by the /i argument to specify the MSI package path, and end with /qn for a silent installation. You can also include to further customize the installation as needed.

To set , switch to the Registry page.

🖥️
Download
Changelog
msiexec
created with ORCA
optional arguments
Optional arguments
CMD with msiexec sample command
ORCA - New Transform
ORCA - Registry page
ORCA - Generate Transform
CMD with msiexec sample command.
ORCA tool with "New Transform" selected from Transform menu.
ORCA tool showing Registry page for editing optional arguments.
ORCA tool with "Generate Transform" selected from Transform menu.