Global Secure Access Client silent install and uninstall

Windows client for Microsoft Entra Global Secure Access that acquires and forwards selected device traffic to Microsoft’s Security Service Edge (Entra Internet Access / Private Access) based on configured forwarding profiles.

EXE arm64 Updated 11 Nov 2026
Vendor
Microsoft Corporation
Category
Security
Installer
WiX Burn bootstrapper
Architecture
arm64
Checked version
2.28.96
winget ID
Microsoft.GlobalSecureAccessClient
License
Proprietary
Download
Official download

Silent install

GlobalSecureAccessClient-setup.exe /quiet /norestart
  1. Download the installer from the direct download link.
  2. Open an elevated Command Prompt: right-click Command Prompt and select Run as administrator.
  3. Change to the folder with the installer, for example cd C:\Temp.
  4. Run the command above. Adjust the file name if you downloaded a different version.

Or install with winget

winget install --id Microsoft.GlobalSecureAccessClient --exact --silent --scope machine --accept-package-agreements --accept-source-agreements

Silent uninstall

winget
winget uninstall --id Microsoft.GlobalSecureAccessClient --exact --silent --accept-source-agreements

Run the command from an elevated Command Prompt.

About the WiX Burn bootstrapper installer

A setup.exe that bundles one or more MSI packages and prerequisites. It takes its own switches, not msiexec ones.

SwitchWhat it does
/quietNo user interface.
/passiveProgress bar only, no questions.
/norestartSuppress any restart.
/log "C:\Temp\install.log"Write a log file.
/uninstallRemove the bundle (run the cached setup.exe).

Deploy Global Secure Access Client with Microsoft Intune

Package the installer as a Win32 app (.intunewin) and use these settings:

Install commandGlobalSecureAccessClient-setup.exe /quiet /norestart
Uninstall command Use the uninstaller from the install folder; winget is not available to the SYSTEM account by default.
Install behaviorSystem

More security apps