Quick Guide: Prepare & Deploy Qualys via Group Policy (GPO) 

DISCLAIMER – The process of creating and deploying an MST is advanced, if you are unsure or not confident in doing so, please contact your IT team for assistance.

Create Your Transform File (MST)

Open your MSI in Orca 

Right-click your setup.msi -> 'Edit with Orca.' The left panel lists tables; select 'Property'. 

 

Add Three Custom Entries 

Add rows for: 

- CUSTOMERID 

- ACTIVATIONID 

- WEBSERVICEURI 

Enter values from your internal targets page. 

Save as MST 

Go to Transform -> New Transform, make changes, then Transform -> Generate Transform. 

Save your file as setup.mst. 

Create & Configure the Group Policy Object

Open Group Policy Management 

Press Win + R, type gpmc.msc, and press Enter. 

Create or Edit a GPO 

Right-click your domain or OU -> 'Create a GPO' or 'Edit' an existing one. 

Add the MSI Package 

Navigate: Computer Configuration -> Policies -> Software Settings -> Software Installation 

Right-click -> New -> Package, enter the UNC path (e.g., \\server\share\setup.msi), select 'Assigned'. 

Add the Transform File 

Right-click the MSI entry -> Properties -> Modifications tab -> Add, then select setup.mst. 

Enable Additional GPO SettingsQuick Guide: Prepare & Deploy via Group Policy (GPO)

Navigate: Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Installer 

Enable the following: 

- Always install with elevated privileges 

- Always wait for the network at computer startup and logon 

- Allow processing across a slow network connection 

These ensure the installer runs with full rights and works even on slow networks. 

 

Final Checklist 

- MST file (setup.mst) created 

- MSI package added to GPO 

- mst file attached under Modifications tab 

- Required Windows Installer policies enabled 

 

For additional Information visit - Qualys Wide-Install Information