Install Muniment Desktop on Windows
Signed Windows release installers are available: MSI per user, MSI per machine, and NSIS per user. Choose one download for the local app, which will need no account. The paid console will hold the organization’s sign-in, sharing, and routing rules, so a fleet install will carry no company key.
Choose a package
The default muniment.msi package installs under %LocalAppData% for the current user without administrator rights. The -machine.msi package installs under %ProgramFiles%, requires administrator rights, and serves every user of the computer. The muniment-nsis.exe executable installs under %LocalAppData%, requires no administrator rights, and serves only the current user.
Verify the per-machine MSI
Windows release packages have Azure Trusted Signing signatures under Green Kangaroo, LLC. The commands below verify the signed per-machine MSI, muniment-machine.msi. The site publishes no verification procedure for the per-user NSIS executable today. Before fleet deployment, require both checks to pass. SignTool must report a successful signature check. PowerShell must report the signer as CN=Green Kangaroo LLC.
signtool verify /pa /v muniment-machine.msi(Get-AuthenticodeSignature .\muniment-machine.msi).SignerCertificate.SubjectPer-user MSI
Run the per-user MSI in the target user’s session. Use the MSI whose name does not end in -machine.msi.
msiexec.exe /i "muniment.msi" /qn /norestartmsiexec.exe /x "muniment.msi" /qn /norestartPer-machine MSI
Run the MSI from an elevated Command Prompt or a deployment agent with administrator rights. Use the artifact whose name ends in -machine.msi. Do not set ALLUSERS on another MSI to change its scope.
msiexec.exe /i "muniment-machine.msi" /qn /norestartmsiexec.exe /x "muniment-machine.msi" /qn /norestart/qn displays no interface and /norestart prevents Windows Installer from restarting the computer. The calling system should handle a restart if msiexec.exe returns 3010.
Per-user NSIS
Run both commands in the target user’s session so %LocalAppData% and the per-user registration refer to that user. The installer does not require administrator rights. The /S switch is case-sensitive.
muniment-nsis.exe /S"%LocalAppData%\muniment\uninstall.exe" /SUpgrade and removal support
The per-machine MSI has a stable Windows Installer upgrade identity, so a newer muniment MSI upgrades an installed copy in place. The verified package contract does not promise upgrade-in-place behavior for the per-user NSIS installer. Use the MSI where supported fleet upgrades are required.