Symantec supply a packager as part of the corporate edition. This allows you to create a single exe that can be designed to undertake a silent install, it will also allow any relevant grc.dat files to be included. There is no need for repackaging nor a .mst.
Take not of the installation source when using Symantec's EXE deployment option. It is simply wrapping the MSI in a self-extracting executable, that runs from %temp% and deletes itself. The problem is, if a reinstall or repair is needed, Windows Installer is going to look in %temp% for the source files it needs.
View inventory records anonymously contributed by opt-in users of the K1000 Systems Management Appliance.