Configure Windows SmartScreenID: oval:org.secpod.oval:def:81460 | Date: (C)2022-06-14 (M)2023-07-31 |
Class: COMPLIANCE | Family: windows |
This policy setting allows you to manage the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning users before running unrecognized programs downloaded from the Internet. Some information is sent to Microsoft about files and programs run on PCs with this feature enabled.
If you enable this policy setting, Windows SmartScreen behavior may be controlled by setting one of the following options:
- Require approval from an administrator before running downloaded unknown software
- Give user a warning before running downloaded unknown software
- Turn off SmartScreen
If you disable or do not configure this policy setting, Windows SmartScreen behavior is managed by administrators on the PC by using Windows SmartScreen Settings in Action Center.
Options:
- Require approval from an administrator before running downloaded unknown software
- Give user a warning before running downloaded unknown software
- Turn off SmartScreen
Counter Measure:
The most restrictive configuration for this policy setting is to enable it and select the Require approval from an administrator before running downloaded unknown software option.
Potential Impact:
If you enable this policy setting, Windows SmartScreen behavior may be controlled by setting one of the following options:
- Require approval from an administrator before running downloaded unknown software
- Give user a warning before running downloaded unknown software
- Turn off SmartScreen
If you disable or do not configure this policy setting, Windows SmartScreen behavior is managed by administrators on the PC by using Windows SmartScreen Settings in Action Center.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!EnableSmartScreen
(3) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!ShellSmartScreen
Platform: |
Microsoft Windows Server 2012 R2 |