GPO policy: "Configure Windows Defender SmartScreen" — ShellSmartScreenLevel, which is a sub-value of the EnableSmartScreen policy for Explorer. Controls whether SmartScreen blocks execution of unrecognized applications or merely warns the user. Registry: HKLM\SOFTWARE\Policies\Microsoft\Windows\System:ShellSmartScreenLevel (REG_SZ). This value is only meaningful when EnableSmartScreen is set to Warn or higher. Reference: Policy CSP - SmartScreen (EnableSmartScreenInShell)
Values
| Enum Value | Description |
|---|---|
|
|
Warn (registry string value "Warn"). SmartScreen displays a warning for unrecognized applications but allows the user to choose to run them after acknowledging the warning. |
|
|
Block (registry string value "Block"). SmartScreen blocks execution of unrecognized applications; users cannot bypass the warning to run the application. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"WARN"