IT Pro: Unattended deployment of Xink Client via GPO (using MSI and MST files)

This GPO installation process requires the creation of the MST file that goes along with your MSI. The MST file modifies the MSI installer and ensures that the DomainAuthToken value is applied during installation. The token is an important piece of the installation as it is used by the Xink client to authenticate users before it updates their signature.

How to create the MST file

1. Download and Install Orca (Typical Installation Type). This is a Microsoft-published application used to modify MSI. CLICK HERE TO DOWNLOAD

2. Download the Xink MSI from the Xink portal’s Preferences > Downloads section.

3. Launch Orca. Click File > Open, locate your Xink MSI then click Open.

4. Click Transform > New Transform.

5. Click Registry from Tables section.

6. Double-click [DOMAINAUTHTOKEN] and paste the token value from the Xink portal.

Where do I find my token?

Go to Xink portal > Preferences> Downloads > Step 2

7. Double-Click TokenExtra and replace with Core

8. Click Transform > Generate Transform and save the MST file to a network share.

How to deploy the Xink MSI and MST files via GPO

1. Create a Group Policy Object. Open Group Policy Management. Right-click the User OU where you want to target your Xink Client MSI installation. Select ''Create a GPO in this domain, and Link it here...'' and name your GPO ''E.g. Deploy Xink MSI Package''

2. Right-click and Edit the newly created GPO ''E.g. Deploy Xink MSI Package''. Expand Computer Configuration > Software Settings.

3. From the Right-Click menu, select Software Installation > New > Package...

4. Point to the Xink MSI. Note: It is very important that the location of both the xinkClientSetupAD MSI and MST files is not a local folder or drive. Rather, the path should be through a network share accessible from everywhere in your network and to which everyone has at least Read permissions.

5. Under Deployment Method, choose Advanced. If you choose another option, you won't be able to apply the MST file you created.

6. Add a name for the package for easy identification (e.g. Xink AD Client).

7. Switch to the Modifications tab and click Add. Point to the corresponding MST file and click OK.

8. Finally, log in to one of the target PC and run 'gpupdate /force' on command prompt.


Using other software deployment tools? (SCCM, PDQ, etc.)

Save both MSI and MST files in the same network share and use the below script to create your package. 

Note: "\\Share Path" should be replaced with the UNC path where these files are placed. Use elevated privileges if required.

msiexec /i "\\Share Path\xinkClientSetupAD.msi" TRANSFORMS="\\Share Path\xinkClientSetupAD.mst" /qn

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.