Deploy Agent Settings from Msiexec

On Windows endpoints, you have the option to deploy the agent and the settings automatically from the Windows Installer (Msiexec) by using the following syntax:
msiexec.exe /i GlobalProtect.msi <SETTING>="<value>"
Msiexec is an executable program that installs or configures a product from the command line. On systems running Microsoft Windows XP or a later OS, the maximum length of the string that you can use at the command prompt is 8,191 characters.
Msiexec Example
msiexec.exe /i GlobalProtect.msi
/quiet PORTAL=””
Install GlobalProtect in quiet mode (no user interaction) and configure the portal address.
msiexec.exe /i GlobalProtect.msi CANCONTINUEIFPORTALCERTINVALID=”no”
Install GlobalProtect with the option to prevent users from connecting to the portal if the certificate is not valid.
For a complete list of settings and the corresponding default values, see Customizable Agent Settings.
To set up the GlobalProtect agent to wrap third-party credentials on a Windows client from Msiexec, see Enable SSO Wrapping for Third-Party Credentials with the Windows Installer.

Related Documentation