ok, I’ve got some packages built for windows based on some of the instructions in this channel. My next step is to figure out how to supply the enroll_secret at install time rather than building it into the package - is this documented somewhere?

Somewhat, part of the point of the packaging is to bundle that. That secret is solely in a text file pointed to by the flag file. You can change it as you like. I don’t know windows well enough to have real advice for it.

no worries - my intent was to isolate the secret from the msi so that someone would need both to enroll

TBH I don’t remember if I wrote it to ship without a secret. Though it would be an easy patch. Certainly shipping an invalid secret is easy.

yeah that’s true…at the moment it’s not a priority - getting visibility and catching low hanging fruit is first order of things

I hope it goes smoothly. I’m always interested in hearing about windows deployment and packaging.

I’m rolling it out to a small group and will expand it it is successful from there. Thus far it works on my test box

Ha. Because that’s where the installer put them on my machine, and I never made that more clever,

ya I created an issue for it but then promptly forgot about it 🙂 https://github.com/kolide/launcher/issues/546