# MSI deployment

{% hint style="info" %}
This feature is available in the **Essential plan and higher**.
{% endhint %}

{% hint style="warning" %}
The MSI package does not grant per-user update capabilities. **Updates require either admin privileges or redeployment via management tools.**
{% endhint %}

## What is MSI?

MSI stands for **Microsoft Software Installer**. It is a Windows Installer format that uses the Microsoft Windows Installer service to install, maintain, and remove software applications on Windows operating systems. MSI packages define the structure and logic of the installation process, and can be customized using parameters or transforms.

This guide is applicable to **Microsoft Intune**, **Active Directory**, and other deployment tools that support **MSI packages**.

## Deployment options

This MSI package can be deployed using various tools and methods, depending on your environment. Common options include:

* Using [msiexec](#msiexec) via script or command line (e.g., for testing or manual installation)
* Domain policies with MST transforms (e.g., [created with ORCA](#domain-policies-mst-with-orca-software))
* **Microsoft Intune**, **System Center Configuration Manager (SCCM)**, or other modern deployment tools that support MSI distribution

## Optional arguments

The MSI installation includes 3 optional arguments to optimize the setup.

### AUTO\_UPDATES

This argument can be set to ***true*** or ***false***.

Default value for the Windows Application is ***true***.

If auto updates are set to ***true*** and an update is available, the Application will show you a modal that allows you to start installation immediately.

If auto updates are set to ***false*** and an update is available, the Application will notify you about the update and ask you to contact your administrator for installation.

### DEFAULT\_PROTOCOL

This argument can be set to ***openvpn*** or ***ikev2***.

The GoodAccess Application allows you to use these two protocols.

Default protocol for the Windows Application is ***openvpn***.

For a persistent connection, for example an RDP server, we recommend you to set ***openvpn*** as your default protocol.

### PERSISTENT

This argument could be set to ***true*** or ***false***.

Default value for the Windows Application is ***false**.*

If persistent is set to ***true**,* and you were previously connected, the Application will connect you immediately after system startup and will keep you connected even while you are logged out of your Windows account.

If persistent is set to ***false***, the Application will connect you after you sign in to your Windows account. If you lock your device or log out of your Windows account, the Application will disconnect you.

## MSIEXEC

Open Command Prompt with administrative privileges (Run as Administrator). Then, use the `msiexec` command followed by the `/i` argument to specify the MSI package path, and end with `/qn` for a silent installation. You can also include [optional arguments](#optional-arguments) to further customize the installation as needed.

{% hint style="info" %}
**This is a sample command**. Update the file **path**, **version**, and **optional arguments** as needed.
{% endhint %}

**msiexec /i "C:\Path\To\GoodAccess\_Setup\_4.6.3.msi" AUTO\_UPDATES="false" DEFAULT\_PROTOCOL="openvpn" PERSISTENT="true" /qn**

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2Fi3hE3VDwFOH2Us9cDFMa%2FFeatures_MSI_deployment_01.png?alt=media&#x26;token=63f17037-e1eb-42e8-8f92-883f05d7a98e" alt="CMD with msiexec sample command."><figcaption><p>CMD with msiexec sample command</p></figcaption></figure>

## Domain policies (MST with ORCA software)

* Open the MSI package with the ORCA software and create a new transform by clicking **Transform** > **New Transform**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2Fzfo0qRKqAs54XRZ691ii%2FFeatures_MSI_deployment_02.png?alt=media&#x26;token=46694848-df42-4b09-b7bb-024a387543d1" alt="ORCA tool with &#x22;New Transform&#x22; selected from Transform menu."><figcaption><p>ORCA - New Transform</p></figcaption></figure>

* To set [Optional arguments](#optional-arguments), switch to the **Registry** page.

<div align="center"><figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FcKwWDCDituJdvvQj8IF0%2FFeatures_MSI_deployment_03.png?alt=media&#x26;token=2344c608-2c72-4cbf-965b-9d7cd9667730" alt="ORCA tool showing Registry page for editing optional arguments."><figcaption><p>ORCA - Registry page</p></figcaption></figure></div>

* Click **Transform** > **Generate Transform** to create the MST transform for your domain deployment.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F1WcLop7Dc6TBuKDhDw0Q%2FFeatures_MSI_deployment_04.png?alt=media&#x26;token=4a63fc03-4ba1-4acb-966e-8ff63566ce07" alt="ORCA tool with &#x22;Generate Transform&#x22; selected from Transform menu."><figcaption><p>ORCA - Generate Transform</p></figcaption></figure>

## [Download](https://link.goodaccess.com/download-msi-app)

## [Changelog](https://support.goodaccess.com/product-changelog/windows)