Hey everybody! First off, I'm not sure I've got this posted in the right forum, so if it has to be moved, that would be greatly appreciated.

I'm attempting to put together a mass deployment version of BOINC (what Berkeley refers to as a custom installer). The end goal is to have an MSI and related installation files placed on a server, and then use Group Policy to deploy it to the workstations. No server installations, no DC installations, just the workstations. The BOINC client should be installed in protected application execution (sandbox) mode, with the boinc_project, boinc_master, and et cetera accounts/groups existing in the domain.

So far, I have successfully unpacked the installer and added the required files for remote control, account manager attachment, and client configuration. I have also managed to alter the MSI to (I think) deploy these files during the installation.

What I'm having trouble with is the sandbox accounts. The BOINC custom installers article says I should be able to set this, and should be able to use domain accounts. I realize the BOINC installer cannot create domain accounts during installation, but that's fine. I'll create the domain accounts and groups needed, and then assign them in the MSI file itself. But for whatever reason, I can't seem to figure out how to make this work--there doesn't seem to be any variable for me to set this. The closest I was able to track down traced to a binary blob that had strings in it that seemed to resemble the method on the BOINC ClientSetupLogicWinSix page, but that's a bit deeper than I wanted to go.

Has anybody figured out how to do mass deployments using domain accounts? Can anybody give me some hints on what I need to be looking for, or better yet a walkthrough or other assistance in putting this together? I would greatly appreciate it!