How to Install Attack Surface Reduction Test Tool Silently with winget on Windows

If you're scripting a Windows machine setup, Attack Surface Reduction Test Tool is one of those apps you want installed silently — no installer wizard, no progress dialogs, no "Next, Next, Finish". Here's how with winget.

TL;DR

Open Terminal as Administrator and run:

winget install --id Microsoft.ASRTestTool -e --silent --accept-package-agreements --accept-source-agreements

Attack Surface Reduction Test Tool: Tool for testing Attack Surface Reduction (ASR) rules

Typical install time: 10–60 seconds depending on installer size.

What gets installed

Portable packages extract to a folder — no installer prompts to suppress.

Per-user install (no admin)

If you don't have admin rights, try per-user scope:

winget install --id Microsoft.ASRTestTool -e --scope user --silent

If the manifest doesn't have a user-scope installer, winget falls back with an error — in that case you genuinely need admin or use the Access denied fix.

Specify a version

To pin a known-good version (useful for reproducible CI / team standardisation):

winget install --id Microsoft.ASRTestTool -e --version 4.13.17600.1000 --silent

List available versions:

winget show --id Microsoft.ASRTestTool --versions

Override silent flags

If winget's --silent doesn't fully suppress the installer's UI, pass native flags via --override:

winget install --id Microsoft.ASRTestTool -e --override "n/a"

For this installer type, override flags aren't typically needed.

Verify after install

winget list --id Microsoft.ASRTestTool

If the version is shown, the install succeeded.

Upgrade silently

winget upgrade --id Microsoft.ASRTestTool -e --silent --accept-package-agreements --accept-source-agreements

Or upgrade as part of a bulk weekly cron — see How to update all Windows apps.

Uninstall silently

winget uninstall --id Microsoft.ASRTestTool --silent --disable-interactivity

Detailed guide: How to uninstall Windows apps with winget.

In a provisioning script

PowerShell snippet for unattended Windows setup:

$apps = @(
  "Microsoft.ASRTestTool"
  # add more packages here
)

foreach ($id in $apps) {
  winget install --id $id -e --silent `
    --accept-package-agreements --accept-source-agreements
}

Wrap in Task Scheduler for one-shot machine provisioning. See Fresh Windows 11 setup.

Common errors

"Attack Surface Reduction Test Tool is already installed" — winget detected the existing install. To force-reinstall over the existing copy:

winget install --id Microsoft.ASRTestTool -e --silent --force

"Installer hash does not match" — Microsoft Corporation published a new version before the winget manifest updated. Wait ~24 hours or pass --force. See hash mismatch fix.

"Access denied" / 0x80070005 — run Terminal as Administrator. See Access denied fix.

0x80073D02 — package in use — Attack Surface Reduction Test Tool is currently running. Close it then retry. See package in use fix.

See also

• Attack Surface Reduction Test Tool on winget.tech → — full package details
• How to install Windows apps with winget → — beginner guide
• Winget commands cheatsheet → — complete reference
• Fresh Windows 11 setup → — full machine workflow