How Can I Turn Off Smartscreen Filter For An Internal Application?

Question

question

BobMcGowan-1152 asked Apr 22, '22 BobMcGowan-1152 answered Apr 28, '22

How Can I Turn Off Smartscreen Filter For An Internal Application?

When creating a custom software solution for a client that they will distribute to their users via email with a download link, Smartscreen indicates that the installer is not commonly downloaded, which it isn't since it's an internal application, but we would like to prevent the users from having to go through the process of Keep / Trust / Install. Is there a way to indicate to Smartscreen that this particular application is trusted? We have applied for a code signing certificate from DigiCert but will this be enough?

ms-edge

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-25T03:00:02.983Z

XuDongPeng-MSFT answered Apr 25, '22 XuDongPeng-MSFT commented Apr 28, '22

Hi @BobMcGowan-1152 ,

If you want to turn SmartScreen on or off in Microsoft Edge, you can follow these steps below:

Open Microsoft Edge and Navigate to edge://settings/privacy.
Under Security, turn Microsoft Defender SmartScreen on or off.

But in some cases, such as on a work or school network,this setting may be managed by a system administrator and can't be changed. For more details about Smartscreen, you can refer to this doc: How can SmartScreen help protect me in Microsoft Edge?
Regards,
Xudong Peng

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BobMcGowan-1152 · Apr 25 at 02:49 PM

Thanks for the reply. I don't want to turn SmartScreen off completely, since it does perform a valuable service. I was hoping to create an exception for a single application. I know we can go through the vetting process so that Microsoft adds it to the "allowed list" but it seems like overkill for an application that will be distributed to a few hundred internal employees. It's an application that will never be available on the public Internet. Isn't there a way for an enterprise to add an application to the list of accepted executables for SmartScreen?

Thank you,

Bob Mc.

0 ·

XuDongPeng-MSFT BobMcGowan-1152 · Apr 28 at 07:28 AM

Hi @BobMcGowan-1152 ,

Well, if this is the case, you may open start and search for Windows Security and click on Virus & threat protection then click on Manage settings and you may add it under Exclusion.
If you believe your file is safe and incorrectly detected as a malware, then report it as incorrect detection to the Microsoft:
https://www.microsoft.com/en-us/wdsi/filesubmission

0 ·

Answer 2 · 2022-04-28T13:53:09.677Z

BobMcGowan-1152 answered Apr 28, '22

Thanks. That's actually a useful idea.

We ended up getting around it by purchasing a code-signing certificate from an accepted Certification Authority (DigiCert). It solved the problem and ended up being simpler than changing the configuration on hundreds of workstations.

Thanks.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question