MSI Installer for Agent

[Juff-Ma]

We are currently using Active Directory to manage our environment. This works fine however it does bring some limitations that AD/GPO can not fulfill.

OpenUEM seems like the perfect software after looking at some other options like TacticalRMM.
0.10.0 Introducing OpenID is also a nice addition since we can integrate it into the existing auth infrastructure.

However there is one problem. OpenUEM's agent is distributed as an Inno Setup executable. Vanilla Active Directory is not able to deploy exe installers. So there are two options:

1. Wrap the EXE in an MSI using 3rd party tools which is messy and doesn't work well with complex applications like OpenUEM that include services
2. Use a startup script. This theoretically works but is more of a hack than an actual solution

Deploying OpenUEMs agent using an MSI would allow to integrate OpenUEM easily into existing Active Directory environments and also make it easier to deploy into new environments since GPO deploy is still the cheapest (it's built in lol) solution to deploying a large amount of software in a fleet of Windows machines.

After OpenUEM is deployed, it can handle software installation, so deploying OpenUEM is the big bugger here.

I would be willing to create such an installer (I've written them in the past), however I couldn't find the existing Inno Setup script and/or build instructions in any of the repos as a reference/starting point.

[doncicuto]

Hi @Juff-Ma, thank you for this issue and for your offer to help, that would be awesome.

Your comments about having an MSI installer really helps me to understand why it should be needed.

I'm afraid that the build instructions for my InnoSetup are in a private repository as I'm using GitHub Actions and self-hosted runners to compile the agents and build the installers (also I use a digital certificate to sign the Windows installer) so that's why they're not open to the public.

Thanks to many comments I'm re-designing how OpenUEM can be deployed and updated, would you be so kind to wait a little so I can ping you when I've something ready that can be packaged into an MSI? Many of the tasks that are executed by the current InnoSetup installer may be removed so I'd like to use your help when everything is ready

[Juff-Ma]

Of course 👍, this isn't a pressing issue. We're not running in a scale where automatic deployments of agents is actually required. I'd be glad to help once everything is in a state ready to be packaged.

[doncicuto]

Awesome, again thanks for your help!