Windows Package Manager (winget)
winget.exe is the Windows Package Manager command-line tool that orchestrates software installation and updates on Windows 10 and Windows 11. It uses manifest-based packages, sources, and a central repository to locate installers, then delegates to installers (MSI, MSIX, or EXE) under user consent and policy controls.
winget.exe queries configured package sources, resolves a package by ID, downloads the installer, and runs it with appropriate silent install options when possible. It leverages manifests and the App Installer service for consistency and auditing.
Reasons it's running:
Winget.exe is not a background service; there is no persistent winget process to disable. You can restrict usage via AppLocker/WDAC, disable the App Installer manifest sources, or remove App Installer access to limit who can run winget. Regular system updates keep it available by design.
winget.exe is the Windows Package Manager CLI that lets you search, install, upgrade, and remove software from package sources directly from Command Prompt or PowerShell.
Yes, when used with trusted sources and signatures verified; always install from Microsoft repositories and verify the publisher before running installers.
Open PowerShell or CMD as administrator and run: winget install <package-id>. You can search first with winget search <name> to find the exact ID.
Use winget upgrade --all to update all packages found in your configured sources, or upgrade specific packages individually.
The package may not exist in the configured sources or the ID/name differs from the manifest. Update sources and verify the exact ID with winget search.
Enable verbose logging with winget --log or --verbose, check network connectivity, verify source configuration, and review OS or Defender logs for restrictions.