MSI deployment

Centralize the distribution of the Client Application to your Team Members.

This feature is available in the Essential plan and higher.

What is MSI?

MSI stands for Microsoft Software Installer. It is a Windows Installer format that uses Microsoft's Windows Installer service to configure installer packages, such as Windows applications or update packages. The MSI is used to install software on Windows operating systems.

This guide is applicable for Active Directory and Microsoft Intune.

Deployment options

There are two deployment options for this MSI package.

Optional arguments

The MSI installation includes 4 optional arguments to optimize setup.

AUTO_UPDATES

This argument can be set to true or false.

Default value for the Windows Application is true.

If auto updates are set to true and an update is available, the Application will show you a modal that allows you to start installation immediately.

If auto updates are set to false and an update is available, the Application will notify you about the update and ask you to contact your administrator for installation.

DEFAULT_PROTOCOL

This argument can be set to openvpn or ikev2.

The GoodAccess Application allows you to use these two protocols.

Default protocol for the Windows Application is openvpn.

For a persistent connection, for example an RDP server, we recommend you to set openvpn as your default protocol.

DEFAULT_TEAM

This argument should be the name of your team.

If you are deploying the Application for a large group of people within the same GA team, we recommend that you set up a default team. That way, you won't have to instruct your employees what the team name is.

PERSISTENT

This argument could be set to true or false.

Default value for the Windows Application is false.

If persistent is set to true, and you were previously connected, the Application will connect you immediately after system startup and will keep you connected even while you are logged out of your Windows account.

If persistent is set to false, the Application will connect you after you sign in to your Windows account. If you lock your device or log out of your Windows account, the Application will disconnect you.

MSIEXEC

With msiexec just use the command msiexec, then the argument /i for installation, and then the path of the MSI package. You can also use our optional arguments for easier installation.

Sample Command:

msiexec /i "GoodAccessSetup.msi" TEAM_NAME="goodaccess" AUTO_UPDATES="false" DEFAULT_PROTOCOL="openvpn" /qn

Domain policies (MST with ORCA software)

  • Open the MSI package with the ORCA software and create a new transform by clicking Transform/New Transform.

  • Now click Transform and generate the MST transform for your domain deployment by clicking Generate Transform.

Last updated