From 40fde144074c586b600a9e6916692dc0d44b1afa Mon Sep 17 00:00:00 2001
From: Graham Williams <gray@fleetdm.com>
Date: Sat, 25 Oct 2025 23:54:21 +0100
Subject: [PATCH] Adds msialwaysinstall profiles (#34423)

- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f)
- Created both **User** and **Device** profiles as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#msialwaysinstallwithelevatedprivileges)
- Profiles return as **Verified** in FleetUI
- Event Viewer shows no errors
- Registry shows provider set for both **Device** and **User** scopes

<img width="1009" height="464" alt="image"
src="https://github.com/user-attachments/assets/90df1b0c-651f-4bfb-bf19-ceb30e34be8e"
/>

<img width="1654" height="1113" alt="image"
src="https://github.com/user-attachments/assets/ed325e97-6d3a-4c53-b700-75f38490cc6d"
/>
---
 ...plicationmanagement-msialwaysinstall-disabled.xml | 12 ++++++++++++
 ...plicationmanagement-msialwaysinstall-disabled.xml | 12 ++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 docs/solutions/windows/configuration-profiles/windows-device-applicationmanagement-msialwaysinstall-disabled.xml
 create mode 100644 docs/solutions/windows/configuration-profiles/windows-user-applicationmanagement-msialwaysinstall-disabled.xml

diff --git a/docs/solutions/windows/configuration-profiles/windows-device-applicationmanagement-msialwaysinstall-disabled.xml b/docs/solutions/windows/configuration-profiles/windows-device-applicationmanagement-msialwaysinstall-disabled.xml
new file mode 100644
index 0000000000..36e1af3e9d
--- /dev/null
+++ b/docs/solutions/windows/configuration-profiles/windows-device-applicationmanagement-msialwaysinstall-disabled.xml
@@ -0,0 +1,12 @@
+<Replace>
+  <CmdID>0199f196-3441-7177-b056-bcaf2aa2f063</CmdID>
+  <Item>
+    <Target>
+      <LocURI>./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges</LocURI>
+    </Target>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Data>0</Data>
+  </Item>
+</Replace>
diff --git a/docs/solutions/windows/configuration-profiles/windows-user-applicationmanagement-msialwaysinstall-disabled.xml b/docs/solutions/windows/configuration-profiles/windows-user-applicationmanagement-msialwaysinstall-disabled.xml
new file mode 100644
index 0000000000..5e57485dd4
--- /dev/null
+++ b/docs/solutions/windows/configuration-profiles/windows-user-applicationmanagement-msialwaysinstall-disabled.xml
@@ -0,0 +1,12 @@
+<Replace>
+  <CmdID>0199f197-5907-7164-af5e-706787d9f942</CmdID>
+  <Item>
+    <Target>
+      <LocURI>./User/Vendor/MSFT/Policy/Config/ApplicationManagement/MSIAlwaysInstallWithElevatedPrivileges</LocURI>
+    </Target>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Data>0</Data>
+  </Item>
+</Replace>
\ No newline at end of file