diff --git a/CHANGELOG.md b/CHANGELOG.md
index 39d7d1e5..30c30ff6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ CHANGE: Use port 80 for the default Ziti API endpoint in the zrok Docker instanc
 
 CHANGE: Clarify OS requirements for zrok VPN
 
+CHANGE: Set the Windows executable search path in the Windows install guide.
+
 FEATURE: Linux service template for systemd user units (https://github.com/openziti/zrok/pull/818)
 
 ## v0.4.45
diff --git a/docs/guides/install/windows.mdx b/docs/guides/install/windows.mdx
index 50e505ad..e6bb4b76 100644
--- a/docs/guides/install/windows.mdx
+++ b/docs/guides/install/windows.mdx
@@ -18,14 +18,19 @@ import styles from '@site/src/css/download-card.module.css';
   </div>
 </AssetsProvider>
 
-1. Extract `zrok.exe` to `%USERPROFILE%\bin` and set search `%PATH%`.
+1. In PowerShell, install in `%USERPROFILE%\bin\zrok.exe` and set the search path.
 
     ```text
     $binDir = Join-Path -Path $env:USERPROFILE -ChildPath "bin"
     New-Item -Path $binDir -ItemType Directory -ErrorAction SilentlyContinue
     $latest = Get-ChildItem -Path .\zrok*windows*.tar.gz | Sort-Object LastWriteTime | Select-Object -Last 1
     tar -xf $latest.FullName -C $binDir zrok.exe
-    $env:path += ";"+$binDir
+    $currentPath = [System.Environment]::GetEnvironmentVariable('PATH', [System.EnvironmentVariableTarget]::User)
+    if ($currentPath -notlike "*$binDir*") {
+        $newPath = "$currentPath;$binDir"
+        [System.Environment]::SetEnvironmentVariable('PATH', $newPath, [System.EnvironmentVariableTarget]::User)
+        $env:Path = $newPath
+    }
     ```
 
 1. With the `zrok` executable in your path, you can then execute the `zrok` directly.
@@ -44,15 +49,6 @@ import styles from '@site/src/css/download-card.module.css';
     v0.4.0 [c889005]
     ```
 
-## Enable Your Environment
-
-Enable your environment without saving the account token in shell history, i.e., `zrok enable {token}`.
-
-```text
-$zrokAccountToken=Read-Host "Enter your zrok account token" -AsSecureString;
-zrok enable ([System.Runtime.InteropServices.Marshal]::PtrToStringAuto([System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($zrokAccountToken)))
-```
-
 ## Wintun for zrok VPN
 
 On Windows, you must install Wintun to use zrok's VPN backend mode. See the [VPN guide](/guides/vpn/vpn.md) for more details.