Windows Defender SmartScreen Registry Keys

Windows Defender SmartScreen protects users from malicious sites and downloads, and its behavior across the operating system, Microsoft Edge, and Store apps is managed by specific registry keys in the Windows Registry Editor (Regedit). This guide outlines the exact registry paths and values required to configure or disable SmartScreen settings across Windows.

System-Wide (Explorer) SmartScreen Settings

The primary registry key governing system-level SmartScreen behavior for downloaded files and desktop applications is located in the Windows Explorer registry branch.

• Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
• Value Name: SmartScreenEnabled
• Value Type: REG_SZ (String Value)
• Value Data Options:
  • RequireAdmin: Blocks unrecognized apps and requires administrator approval to run.
  • Warn: Displays a warning prompt before running unrecognized apps, allowing the user to bypass it.
  • Off: Completely disables system-level SmartScreen.

Alternatively, if managed via Group Policy, the policy key takes precedence: * Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System * Value Name: EnableSmartScreen * Value Type: REG_DWORD (0 = Disabled, 1 = Enabled)

Microsoft Edge SmartScreen Settings

SmartScreen protection inside Microsoft Edge is controlled via the browser policy key.

• Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge
• Value Name: SmartScreenEnabled
• Value Type: REG_DWORD
• Value Data Options:
  • 1: Enables SmartScreen in Microsoft Edge.
  • 0: Disables SmartScreen in Microsoft Edge.

To prevent users from bypassing SmartScreen warnings for malicious sites in Edge: * Value Name: PreventSmartScreenPromptOverride * Value Type: REG_DWORD (1 = Prevent override, 0 = Allow override)

Microsoft Store Apps SmartScreen Settings

To configure SmartScreen filtering for web content used by Microsoft Store apps (UWP apps):

• Registry Path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost
• Value Name: EnableWebContentEvaluation
• Value Type: REG_DWORD
• Value Data Options:
  • 1: Enables web content scanning for Store apps.
  • 0: Disables web content scanning for Store apps.

How to Apply Changes in Regedit

1. Press Windows Key + R, type regedit, and press Enter.
2. Navigate to the desired key path listed above.
3. Locate or create the specified value name by right-clicking the right pane and choosing New > String Value or DWORD (32-bit) Value.
4. Double-click the value to set the desired data.
5. Restart the computer or restart the explorer.exe process via Task Manager to apply the changes.