Windows – Disable SmartScreen

email me

Basic Info

SmartScreen is a Microsoft filtering tool designed to detect and block suspicious and malicious sites, applications and files. The program checks the safety of websites and downloads and tracks malware and phishing attempts. In some cases, it may be unwanted, and you may want to disable it.


Registry

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

Type: REG_SZ

Value: SmartScreenEnabled

Data: Off

 
Group Policy

1.  Navigate to Computer Configuration > Administrative Templates > Windows Components > File Explorer

2. Double-click on Configure Windows Defender SmartScreen

3. To disable the SmartScreen filter, select the radio option Disabled

 

Keep SmartScreen Enabled and Whitelist an App

Right-click the EXE and select Properties from the context menu.

In the Properties window, go to the General tab. At the bottom, you will see a Security section that reads, The file came from another computer and might be blocked to help protect this computer. Next to it is a box called Unblock. Check it and grant admin permission to execute the change.


Unblock using PowerShell

unblock-file -path “path\to\file”


Add Unblock Files to Context Menu

Create reg file and apply the following reg values; test on file afterwards.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\*\shell\powershell] @=”Unblock Files”
[HKEY_CLASSES_ROOT\*\shell\powershell\command] @=”C:\\\\Windows\\\\system32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe
Unblock-File -LiteralPath ‘%L'”

 

Disable Downloaded Files from being Blocked in Group Policy

1. Navigate to User Configuration > Administrative Templates > Windows Components > Attachment Manager

2. In the right pane of Attachment Manager, double click on Do not preserve zone information in file attachments.

3. Select Enable


Registry

Or, create reg file and apply the following reg values

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
“SaveZoneInformation”=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments]
“SaveZoneInformation”=dword:00000001