I use cx_Freeze to get an exe and Inno Setup for a Windows installer. It has worked well for me. I also have a DigiCert dongle to sign the exes.