Deploy Coinetic silently (RMM, Group Policy, Intune)

Install Coinetic on your customers' Windows Servers and PCs without a single click: one command, a license check before anything is installed, and exit codes your script can act on.

CoineticSetup.exe /quiet /key=CNT-XXXXX-XXXXX-XXXXX-XXXXX /accepteula

1. Before you start

• A license key (CNT-...). One key covers as many computers as its license includes, first come, first served - so one key per customer is enough. Resellers buy keys in the partner area.
• Administrator or SYSTEM rights. RMM agents, Group Policy computer startup scripts and Intune (install behavior System) all run as SYSTEM.
• Internet access from the computer: relayer.coinetic.io on TCP 443 for the license check (a direct connection, not through a web proxy), and coinetic.io for the download and later updates.
• Windows 7 SP1 / Server 2008 R2 SP1 up to Windows 11 / Server 2025, 32- or 64-bit, any language.

2. The command line

CoineticSetup.exe /quiet /key=CNT-XXXXX-XXXXX-XXXXX-XXXXX /accepteula

Running it again on a computer where Coinetic is installed updates or repairs it; /accepteula is not needed then. Without /key, the command works only on a computer that already has a valid license.

Unattended uninstall (from the install folder, by default C:\Program Files\Coinetic):

"C:\Program Files\Coinetic\Coinetic.exe" /uninstall /quiet

The protection service, the program and its shortcuts are removed and the firewall is put back as it was before Coinetic. The settings in C:\ProgramData\Coinetic are kept.

3. Exit codes

Every unattended run is logged in C:\ProgramData\Coinetic\setup.log, step by step.

4. Example: RMM script (PowerShell)

Downloads the installer to the temp folder, checks that it is validly signed by Salus Alpha Group AG, installs, and hands the exit code back to your RMM. Works with PowerShell 2.0 (Windows 7 / Server 2008 R2) and later. Replace the key.

# Coinetic - unattended installation from an RMM tool (runs as SYSTEM or administrator)
$Key  = 'CNT-XXXXX-XXXXX-XXXXX-XXXXX'   # the customer's license key
$Url  = 'https://coinetic.io/download/CoineticSetup.exe'
$File = Join-Path $env:TEMP 'CoineticSetup.exe'

# TLS 1.2 for older Windows (ignored where it is already the default)
try { [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072 } catch { }

try {
    (New-Object System.Net.WebClient).DownloadFile($Url, $File)
} catch {
    Write-Output "Download failed: $($_.Exception.Message)"
    exit 1
}

# only run a file that is validly signed by Salus Alpha Group AG
$sig = Get-AuthenticodeSignature -FilePath $File
if ($sig.Status -ne 'Valid' -or $sig.SignerCertificate.Subject -notmatch '(^|,\s*)O="?Salus Alpha Group AG"?(,|$)') {
    Write-Output "Signature check failed: $($sig.Status) $($sig.StatusMessage)"
    Remove-Item -Path $File -Force -ErrorAction SilentlyContinue
    exit 1
}

$p = Start-Process -FilePath $File -ArgumentList '/quiet', "/key=$Key", '/accepteula' -Wait -PassThru
$code = $p.ExitCode
Remove-Item -Path $File -Force -ErrorAction SilentlyContinue

switch ($code) {
    0       { Write-Output 'Coinetic installed - protection is running.' }
    3       { Write-Output 'License key not valid, or no valid license - nothing installed.' }
    5       { Write-Output 'First installation needs /accepteula - nothing installed.' }
    740     { Write-Output 'Not run as administrator or SYSTEM - nothing changed.' }
    default { Write-Output "Setup failed (exit code $code) - see C:\ProgramData\Coinetic\setup.log" }
}
exit $code

Running the script again on a computer that already has Coinetic simply updates or repairs it.

5. Example: Group Policy computer startup script

Put CoineticSetup.exe and this batch file on a share that the computer accounts can read (Domain Computers: Read), then add the batch file under Computer Configuration › Policies › Windows Settings › Scripts › Startup. Startup scripts run as SYSTEM. The key is readable by everyone who can read the share, so keep the share's permissions tight.

@echo off
rem Coinetic - Group Policy computer startup script (runs as SYSTEM)
rem Already installed? The installed Coinetic keeps itself up to date - nothing to do.
if exist "%ProgramFiles%\Coinetic\Coinetic.exe" exit /b 0

start "" /wait "\\fileserver\deploy$\Coinetic\CoineticSetup.exe" /quiet /key=CNT-XXXXX-XXXXX-XXXXX-XXXXX /accepteula
exit /b %ERRORLEVEL%

Replace the share path and the key. start "" /wait makes the script wait for the installer and pass on its exit code. If the network is not ready yet at startup, enable Computer Configuration › Administrative Templates › System › Logon › Always wait for the network at computer startup and logon. Results per computer are in its C:\ProgramData\Coinetic\setup.log.

6. Example: Intune (Win32 app)

1. Put CoineticSetup.exe in an empty folder and package it with the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe) into a .intunewin file.
2. In the Intune admin center: Apps › Windows › Add › Windows app (Win32), upload the file.
3. Program settings:

   Setting	Value
   Install command	CoineticSetup.exe /quiet /key=CNT-XXXXX-XXXXX-XXXXX-XXXXX /accepteula
   Uninstall command	"C:\Program Files\Coinetic\Coinetic.exe" /uninstall /quiet
   Install behavior	System
   Device restart behavior	No specific action (no restart needed)
   Return codes	Keep the defaults; 0 = success. Coinetic's 1, 3, 5 and 740 are reported as failed - the reason is in setup.log.

4. Detection rule - File:

   Setting	Value
   Path	C:\Program Files\Coinetic
   File or folder	Coinetic.exe
   Detection method	File or folder exists
   Associated with a 32-bit app on 64-bit clients	No

   Detect by existence, not by version: Coinetic updates itself, and a version rule would make Intune install the old package again. If you also uninstall through Intune, a Registry rule is the better choice, because Coinetic.exe deletes itself a few seconds after the uninstall ends: key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coinetic, Key exists.

7. Choose the view your customers see first

Coinetic has two views. The Simple view is for end users: the status at a glance and the most important pages. The Full view is for you: all rules, the live log and every setting. Without a setting, a Windows Server or a domain PC opens in the Full view, a home or workgroup PC in the Simple view.

To set the start view for all users of a computer, add one line to C:\ProgramData\Coinetic\engine.ini: DefaultView=simple or DefaultView=full. It applies to every user who has not picked a view yet; a user can always switch in the View menu. Run this after the installation, as administrator or SYSTEM (PowerShell 2.0 and later):

# Coinetic - start view for all users of this computer: 'simple' or 'full'
$View = 'simple'
$Ini  = Join-Path $env:ProgramData 'Coinetic\engine.ini'
$Utf8 = New-Object System.Text.UTF8Encoding($false)

$lines = @()
if (Test-Path $Ini) {
    $lines = @([System.IO.File]::ReadAllLines($Ini, $Utf8) | Where-Object { $_ -notmatch '^\s*DefaultView\s*=' })
}
$lines += "DefaultView=$View"
[System.IO.File]::WriteAllLines($Ini, [string[]]$lines, $Utf8)

The script keeps every other line of engine.ini and replaces an existing DefaultView line.

8. After the rollout

• Updates: the installed Coinetic checks for updates itself and installs only updates that come from coinetic.io, match the published checksum and are signed by Salus Alpha Group AG. No RMM job, no new Intune package.
• Logs: C:\ProgramData\Coinetic\setup.log (installations and updates) and C:\ProgramData\Coinetic\service.log (the protection service).
• Licenses: resellers see every customer's license - plan, computers, valid until - in the partner area.
• Verify the installer by hand: see Trust for the signature and SHA-256 check.

Frequently asked

Can I install Coinetic without user interaction?

Yes. Run CoineticSetup.exe /quiet /key=YOUR-KEY /accepteula as administrator or SYSTEM, for example from an RMM tool, a Group Policy startup script or Intune.

Why does the silent install end with exit code 5?

A first unattended installation needs /accepteula, which confirms that you accept the license agreement for that computer. Without it nothing is installed.

Why does the silent install end with exit code 3?

The license key was not accepted, or the computer has no valid license. Check the key and its number of computers, and that the computer can reach relayer.coinetic.io on TCP 443. Details are in C:\ProgramData\Coinetic\setup.log.

Do I need to deploy updates?

No. The installed Coinetic updates itself and installs only updates signed by Salus Alpha Group AG.

How do I uninstall Coinetic silently?

Run "C:\Program Files\Coinetic\Coinetic.exe" /uninstall /quiet as administrator or SYSTEM. The firewall is put back as it was before Coinetic; the settings in C:\ProgramData\Coinetic are kept.