The Twingate Windows client is distributed in an MSI package in order to allow automated managed device deployment.

You can download the MSI release for the latest client version here which you can download and configure in your MDM solution (for example, Microsoft InTune).

We also maintain a historical public changelog of prior releases.

MSI deployment options

The MSI package supports a number of command line options that are useful for automated deployments:

• Silent installation. The /qn option will suppress the installation dialog and automatically accept the user terms of service.
• Pre-configure the Twingate Network. The network= option allows pre-configuring the Twingate Network name so that users do not have to enter this information.
• Disable automatic updates. Setting no_optional_updates=true will disable optional updates. See the next section for more information on why you might want to do this.
• Configure NCSI global DNS. Setting ncsi_global_dns=true will enable NCSI_GlobalDns. Enable this option if users are experiencing a false “No internet” NCSI while Twingate is running.

Example

In this example, this will install the Twingate Windows client, setting the Twingate Network to beam reach.twingate.com and disable optional updates.

TwingateWindowsInstaller.msi /qn network=beamreach.twingate.com no_optional_updates=true

Should you disable automatic updates?

Usually, yes, but this depends on whether you allow users to have local admin rights on their Windows PC. Automatic updates cannot be installed without the local user providing administrator authorization, so if you do not allow local admin rights, you should disable automatic updates. The MSI command-line setting allows flexibility for different user groups depending on their local admin permissions.

In summary:

• If you allow local admin rights: We recommend you leave automatic updates enabled (this is the default). Users will be prompted when an update is available and asked to update the Twingate client.
• If you do not allow local admin rights: You should disable automatic updates. This is because, if optional updates are enabled, users will receive update availability prompts but will not be able to update the client. New versions of the Twingate Windows client must instead be pushed to users via your MDM solution.

Microsoft Intune and Endpoint Manager

Microsoft Intune and Endpoint Manager are popular solutions for managing Windows devices. You can deploy the Twingate Windows Client using Microsoft Intune by following the steps outlined in the Microsoft Intune & Endpoint Manager guide.

Third-party MDM solutions

If you use a third-party MDM solution, you can deploy the Twingate Windows Client using the MSI package and the command-line options described above. Consult your MDM documentation for instructions on how to deploy software packages.

If custom PowerShell scripts are supported, you can follow the instructions in the Microsoft Intune custom script guide. This guide provides an example script that downloads the Twingate Client MSI installer and installs it on the device.

Chocolatey

Chocolatey is a package manager for Windows that allows easy installation and updates of thousands of software packages. Installation instructions are available on Chocolatey’s website.

With Chocolatey installed, Twingate can be installed with a single command:

choco install twingate