Skip to main content

Organization-wide deployment (Windows)

This guide explains how to deploy and manage AdBlocker Ultimate for Windows across your organization using the MSI installer.

Updated over 2 weeks ago

1. Download the MSI

Choose the installer that matches endpoint architecture:

2. Install silently

Run all commands with admin privileges.

Run the MSI on the target machine:

msiexec /quiet /i AdBlockerInstaller_x64.msi

Install and apply the license key during setup:

msiexec /quiet /i AdBlockerInstaller_x64.msi LICENSEKEY=XXXXXXXXXXXXX HTTPSFILTERING=1

Replace _x64 with _x86 for 32-bit machines.

3. Provision the license key

There are two supported methods:

Option A: During installation

Pass LICENSEKEY in the MSI command line, as shown above.

Option B: Group Policy or registry

On Active Directory-joined machines, set the license key in policy:

HKEY_LOCAL_MACHINE\Software\Policies\AdAvoid\AdBlocker Ultimate

Create a String value:

  • Name: lk

  • Value: your license key (for example, XXXXXXXXXXXXX)

If this policy value is set, the application uses it for license validation.

4. HTTPS filtering policy

Option A: MSI parameter

Pass HTTPSFILTERING=1 on the msiexec command line:

msiexec /quiet /i AdBlockerInstaller_x64.msi LICENSEKEY=XXXXXXXXXXXX HTTPSFILTERING=1

Option B: Group Policy or registry

Set a DWORD value under the same policy path as the license key:

HKEY_LOCAL_MACHINE\Software\Policies\AdAvoid\AdBlocker Ultimate

  • Name: HTTPSFiltering

  • Type: DWORD

  • Value: 1 to enforce HTTPS filtering on, 0 to enforce it off

Option C: PowerShell script

reg add "HKLM\Software\Policies\AdAvoid\AdBlocker Ultimate" /v HTTPSFiltering /t REG_DWORD /d 1 /f

How it works

When HTTPSFiltering is set to 1:

  • The service automatically installs a root CA certificate on the machine

  • HTTPS filtering is enabled and cannot be disabled by the end user

  • Each machine generates its own unique certificate (no shared keys across endpoints)

When set to 0, HTTPS filtering is disabled and the user cannot enable it.

When the value is absent, the user controls the setting as usual.

5. Network requirements

Allow access to *.adavoid.org for licensing, filter updates, and service communication.

6. Roll out the MSI

Group Policy (GPO)

Use Computer Configuration > Policies > Software Settings > Software installation to assign or publish the MSI package.

SCCM / MECM

Create an application and use:

msiexec /quiet /i AdBlockerInstaller_x64.msi LICENSEKEY=XXXXXXXXXXX HTTPSFILTERING=1

Microsoft Intune

Add the MSI as a Line-of-business app. If needed, pass MSI arguments:

LICENSEKEY=XXXXXXXXXXX HTTPSFILTERING=1

Other deployment tools (PDQ, scripts, RMM, etc.)

Use the same silent install pattern:

msiexec /quiet /i AdBlockerInstaller_x64.msi LICENSEKEY=XXXXXXXXXXXX HTTPSFILTERING=1

7. Update deployed installations

Redeploy/update using:

msiexec /quiet /i AdBlockerInstaller_x64.msi REINSTALL=ALL REINSTALLMODE=vomus

For MSI-managed deployments, use your deployment tool to roll out newer MSI versions.

8. Uninstall silently

msiexec /quiet /x AdBlockerInstaller_x64.msi

Did this answer your question?