Install Apps on Windows Server Safely (winget, MSI)

A fresh Windows Server VPS comes with very little software, and its locked-down defaults can make the first download awkward. This guide shows safe ways to install a browser, tools and apps, and how to keep them updated.

Before you start

An RDP session as an administrator (see connect with RDP).
Windows fully updated (see Windows Update on a server).

Get a browser

Windows Server 2022 and 2025 include Microsoft Edge. On older versions with Internet Explorer, IE Enhanced Security Configuration blocks most sites. Turn it off for administrators in Server Manager → Local Server → IE Enhanced Security Configuration → Administrators: Off, download the browser from its official site, then switch it back on.

Install with winget

winget is the Windows package manager. It ships with Windows Server 2025; on 2022 it can be installed from Microsoft's App Installer package. Check:

winget --version

winget search notepad++
winget install --id Notepad++.Notepad++ -e

Update everything installed through winget:

winget upgrade --all

Install from official installers

Download only from the vendor's own site.
Right-click the file, choose Properties and check the Digital Signatures tab shows the expected publisher.
Run it, preferring the "all users" install so every RDP user gets it.

For silent installs in scripts, MSI files accept msiexec /i app.msi /qn.

Danger: Cracked software, "free" licence keys and unknown download mirrors are the most common way Windows servers get infected. On a server that is reachable from the internet, the risk is much higher than on a home PC.

Install server roles instead of apps

Web servers, file sharing and similar features come as roles: see roles and features and install IIS and host a website. Databases: install SQL Server Express.

Keep apps running after you disconnect

Closing the RDP window leaves your session running; signing out closes your apps. For always-on apps see keep apps running 24/7 and Task Scheduler.

Uninstall

Use Settings → Apps → Installed apps, appwiz.cpl, or winget uninstall --id Name.Id.

Troubleshooting

Downloads blocked by SmartScreen: confirm the publisher, then choose More info → Run anyway only if you trust it.
winget not recognised: install App Installer or use the official installer instead.
App slows the server: check with Task Manager and Resource Monitor.

Next steps

Was this guide helpful?

Still stuck?

Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.

Ask MdmHost AI Open a ticket