title: visual studio generated msi vs gpo: This advertised application will not be installed because it might be unsafe
body: <p>I have outlook vsto addin with oneclick installer (vsto manifests etc) that is bundled with MSI. This is done to be able to install it with Group Policy (as I learned oneclick cannot be really deployed with GPO, it needs MSI).</p>
  
  <p>This msi works fine if I run it from limited account (UAC prompts) or admin account.
  Problem is that if it is deployed via GPO it shows: </p>
  
  <blockquote>
    <p>"This advertised application will not be installed because it might be unsafe (...)"</p>
  </blockquote>
  
  <p>I looked to stackoverflow and found that it could be run with /qb switch - but it doesn't work :(. </p>
  
  <p>Somewhere in internet I found this is related to this: ERRCA_UIANDADVERTISED 
  <a href="http://board.issociate.de/thread/401848/Advertised-application-will-not-be-installed.html" rel="nofollow noreferrer">http://board.issociate.de/thread/401848/Advertised-application-will-not-be-installed.html</a></p>
  
  <p><a href="http://www.creativedocs.net/blog/index.php?serendipity%5Baction%5D=search&amp;serendipity%5BsearchTerm%5D=versionmax" rel="nofollow noreferrer">http://www.creativedocs.net/blog/index.php?serendipity%5Baction%5D=search&amp;serendipity%5BsearchTerm%5D=versionmax</a></p>
  
  <p>but to be honest I don't understand why visual studio almost defaul msi is not really deployable with GPO.
  What exactly should I fix in my MSI in visual studio to make it working?</p>