Basic Info
SmartScreen is a Microsoft filtering tool designed to detect and block suspicious and malicious sites, applications and files. The program checks the safety of websites and downloads and tracks malware and phishing attempts. In some cases, it may be unwanted, and you may want to disable it.
Registry
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Type: REG_SZ
Value: SmartScreenEnabled
Data: Off
Group Policy
1. Navigate to Computer Configuration > Administrative Templates > Windows Components > File Explorer
2. Double-click on Configure Windows Defender SmartScreen
3. To disable the SmartScreen filter, select the radio option Disabled
Keep SmartScreen Enabled and Whitelist an App
Right-click the EXE and select Properties from the context menu.
In the Properties window, go to the General tab. At the bottom, you will see a Security section that reads, The file came from another computer and might be blocked to help protect this computer. Next to it is a box called Unblock. Check it and grant admin permission to execute the change.
Unblock using PowerShell
unblock-file -path “path\to\file”
Add Unblock Files to Context Menu
Create reg file and apply the following reg values; test on file afterwards.
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\*\shell\powershell] @=”Unblock Files”
[HKEY_CLASSES_ROOT\*\shell\powershell\command] @=”C:\\\\Windows\\\\system32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe
Unblock-File -LiteralPath ‘%L'”
Disable Downloaded Files from being Blocked in Group Policy
1. Navigate to User Configuration > Administrative Templates > Windows Components > Attachment Manager
2. In the right pane of Attachment Manager, double click on Do not preserve zone information in file attachments.
3. Select Enable
Registry
Or, create reg file and apply the following reg values
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
“SaveZoneInformation”=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments]
“SaveZoneInformation”=dword:00000001