Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to install a windows service on many windows clients in an AD environment. I'm assuming the company has some sort of client management system installed.

The install must be silent and cause no UAC popups to appear on the clients. I have an msi install file, and I can install it with msiexec in quiet mode on my computer during testing. But do I have to write an installer that runs silently, or can I rely on msiexec to deal with that?

I'm also having trouble with the signed msi file. I have a certificate, but the install is UAC untrusted unless I install the certificate in the trusted certificate store. How is a certificate pushed to this store on the clients before the install? Or is there some other way to approach this?

How is the UAC popup dealt with generally in network based updates like this? I don't want anything to appear.

share|improve this question
Feel free to correct me if I've misinterpreted things but what you appear to be after is a way to circumvent Windows inbuilt safety measures, rather than getting a suitable certificate and building a proper installer. – John Gardeniers Apr 16 '11 at 7:36
If you have an established CA in your AD Infrastructure you can use that to push trusted CA's to your clients. John was merely asking you to clarify if you wish to get around PKI or if you want to do it right. – SpacemanSpiff Apr 16 '11 at 18:35
up vote 2 down vote accepted

If you have an MSI file you can distribute this via Group Policy. There are plenty of tutorials:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.