Privacy and Security Enable or Disable Microsoft Defender SmartScreen for Microsoft Store Apps in Windows 11


Microsoft_Store_banner.png

This tutorial will show you how to turn on or off Microsoft Defender SmartScreen for Microsoft Store apps for your account or all users in Windows 11.

Microsoft Defender SmartScreen protects against phishing or malware websites and applications, and the downloading of potentially malicious files.

By default, Microsoft Defender SmartScreen protects your device by checking web content that Microsoft Store apps use.

You can turn on or off Microsoft Defender SmartScreen for Microsoft Store apps in Windows 11.

On = Warns users that the sites and downloads used by Microsoft Store apps are potentially dangerous but allows the action to continue.

Off = Turns off Microsoft Defender SmartScreen, so a user isn't alerted or stopped from visiting sites or from downloading potentially malicious apps and files.

References:



Contents

  • Option One: Turn On or Off Microsoft Defender SmartScreen for Microsoft Store Apps for Current User in Windows Security
  • Option Two: Turn On or Off Microsoft Defender SmartScreen for Microsoft Store Apps for Current User using REG file
  • Option Three: Enable or Disable Microsoft Defender SmartScreen for Microsoft Store Apps for All Users using REG file




Option One

Turn On or Off Microsoft Defender SmartScreen for Microsoft Store Apps for Current User in Windows Security


1 Open Windows Security.

2 Click/tap on App & browser control. (see screenshot below)

Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps-1.png

3 Click/tap on the Reputation-based protection settings link. (see screenshot below)

Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps-2.png

4 Turn On (default) or Off SmartScreen for Microsoft Store apps for what you want. (see screenshot below)

Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps-3.png

5 You can now close Windows Security if you like.




Option Two

Turn On or Off Microsoft Defender SmartScreen for Microsoft Store Apps for Current User using REG file


1 Do step 2 (on) or step 3 (off) below for what you would like to do.

2 Turn On Microsoft Defender SmartScreen for Microsoft Store Apps

This is the default setting


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_ON_Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000001
"PreventOverride"=dword:00000000

3 Turn Off Microsoft Defender SmartScreen for Microsoft Store Apps

A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_OFF_Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000000
"PreventOverride"=dword:00000000

4 Save the REG file to your desktop.

5 Double click/tap on the downloaded REG file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded REG file if you like.




Option Three

Enable or Disable Microsoft Defender SmartScreen for Microsoft Store Apps for All Users using REG file


You must be signed in as an administrator to use this option.


1 Do step 2 (enable) or step 3 (disable) below for what you want.


 2. Enable Microsoft Defender SmartScreen for Microsoft Store Apps for All Users

This is the default setting to allow using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Enable_Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000001


 3. Disable Microsoft Defender SmartScreen for Microsoft Store Apps for All Users

This will override and prevent using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Disable_Microsoft_Defender_SmartScreen_for_Microsoft_Store_apps_for_all_users.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000000

4 Save the REG file to your desktop.

5 Double click/tap on the downloaded REG file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded REG file if you like.


That's it,
Shawn Brink


 

Attachments

Last edited:
@Brink are you sure in step 3, the value of PreventOverride shouldn't be 1 ?
Hello mate, :alien:

"PreventOverride" stays set to "0" when you turn on or off SmartScreen for Microsoft Store Apps.

Only "EnableWebContentEvaluation" gets toggled to "1" or "0".
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Thank you, @Brink I got confused between this PreventO and the others that Microsoft puts to allow certain windows services/apps to override user choice (such as location)

On a related note, I performed a search on 11F and did not find the following Reg shticks from MSFT in the tutorials. I believe they are new keys. If they exist on 11F, great! If not, feel free to verify/use:

[HKLM\SOFTWARE\Policies\Microsoft\Edge]
"AutofillCreditCardEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"PreventSmartScreenPromptOverride"=dword:00000000
"PreventSmartScreenPromptOverrideForFiles"=dword:00000000
"SmartScreenDnsRequestsEnabled"=dword:00000000
"SmartScreenEnabled"=dword:00000000
"SmartScreenForTrustedDownloadsEnabled"=dword:00000000
"SmartScreenPuaEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000

[HKLM\SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains]
"1"="*" <-- very unsure about this one.
 

My Computer

System One

  • OS
    Win Server 2025 Insiders (currently 26227)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell T7910
    CPU
    2x E5-2699v4 (44 cores)
    Motherboard
    Dell
    Memory
    192GB
    Graphics Card(s)
    Arc 580
    Monitor(s) Displays
    3 x Samsung LU something or another, equivalent to Asus VG28UQL1
    Screen Resolution
    3x4k
    Hard Drives
    SSDs: (1) 3x SPCC "SPCCM.2PCIeSSD" (4TB) (2) PNY CS31400 (2TB) (3) Gigabyte-ASM2NE6 (1TB),
    PSU
    2x850W
    Case
    TT Tower 500
    Cooling
    6xIceberg Thermal IceGALE 120mm, 2xIceberg Thermal IceGALE 140MM, ThermalTake 360 CPU Cooler
    Keyboard
    2xMS Sculpt
    Mouse
    2xLogitech MX Master (2 and 3)
    Internet Speed
    1GB
    Browser
    Thorium
    Other Info
    Also 36TB SAN. And additional 15 SAS Drives
[HKLM\SOFTWARE\Policies\Microsoft\Edge\SmartScreenAllowListDomains]
"1"="*" <-- very unsure about this one.
This value is "allow anything from any domain".

I don't think that's a very smart thing to add, especially if your security software doesn't scan everything.
 

My Computer

System One

  • OS
    Windows 7
This value is "allow anything from any domain".

I don't think that's a very smart thing to add, especially if your security software doesn't scan everything.
I understand. This is for users who have other AV programs.
 

My Computer

System One

  • OS
    Win Server 2025 Insiders (currently 26227)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell T7910
    CPU
    2x E5-2699v4 (44 cores)
    Motherboard
    Dell
    Memory
    192GB
    Graphics Card(s)
    Arc 580
    Monitor(s) Displays
    3 x Samsung LU something or another, equivalent to Asus VG28UQL1
    Screen Resolution
    3x4k
    Hard Drives
    SSDs: (1) 3x SPCC "SPCCM.2PCIeSSD" (4TB) (2) PNY CS31400 (2TB) (3) Gigabyte-ASM2NE6 (1TB),
    PSU
    2x850W
    Case
    TT Tower 500
    Cooling
    6xIceberg Thermal IceGALE 120mm, 2xIceberg Thermal IceGALE 140MM, ThermalTake 360 CPU Cooler
    Keyboard
    2xMS Sculpt
    Mouse
    2xLogitech MX Master (2 and 3)
    Internet Speed
    1GB
    Browser
    Thorium
    Other Info
    Also 36TB SAN. And additional 15 SAS Drives
For all users .reg file? 😢
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    Core i5 13600KF
    Motherboard
    Asrock Z790 PG Lightning
    Memory
    2x16GB 7200Mhz C34 Tuned
    Graphics Card(s)
    Radeon RX 6700 XT
    Monitor(s) Displays
    Philips 24M1N3200ZA (165Hz IPS)
    Screen Resolution
    1080p
    Hard Drives
    1TB NVMe (3GB/s)
    PSU
    Aerocool VX 550W
    Case
    Aerocool Hive v3
    Cooling
    Xilence M705D
    Browser
    Edge
    Antivirus
    Malwarebytes
Not sure what you are asking. HKLM is for all users, except that some key exist which are either (a) only in HKCU or (b) HKCU overrides HKLM. In a few cases HKLM and HKCU are combined by whatever logic the Msft gods decide.
 

My Computer

System One

  • OS
    Win Server 2025 Insiders (currently 26227)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell T7910
    CPU
    2x E5-2699v4 (44 cores)
    Motherboard
    Dell
    Memory
    192GB
    Graphics Card(s)
    Arc 580
    Monitor(s) Displays
    3 x Samsung LU something or another, equivalent to Asus VG28UQL1
    Screen Resolution
    3x4k
    Hard Drives
    SSDs: (1) 3x SPCC "SPCCM.2PCIeSSD" (4TB) (2) PNY CS31400 (2TB) (3) Gigabyte-ASM2NE6 (1TB),
    PSU
    2x850W
    Case
    TT Tower 500
    Cooling
    6xIceberg Thermal IceGALE 120mm, 2xIceberg Thermal IceGALE 140MM, ThermalTake 360 CPU Cooler
    Keyboard
    2xMS Sculpt
    Mouse
    2xLogitech MX Master (2 and 3)
    Internet Speed
    1GB
    Browser
    Thorium
    Other Info
    Also 36TB SAN. And additional 15 SAS Drives
Not sure what you are asking. HKLM is for all users, except that some key exist which are either (a) only in HKCU or (b) HKCU overrides HKLM. In a few cases HKLM and HKCU are combined by whatever logic the Msft gods decide.
Ok i found it. This is how you disable it for All Users.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000000
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    Core i5 13600KF
    Motherboard
    Asrock Z790 PG Lightning
    Memory
    2x16GB 7200Mhz C34 Tuned
    Graphics Card(s)
    Radeon RX 6700 XT
    Monitor(s) Displays
    Philips 24M1N3200ZA (165Hz IPS)
    Screen Resolution
    1080p
    Hard Drives
    1TB NVMe (3GB/s)
    PSU
    Aerocool VX 550W
    Case
    Aerocool Hive v3
    Cooling
    Xilence M705D
    Browser
    Edge
    Antivirus
    Malwarebytes
Ok i found it. This is how you disable it for All Users.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost]
"EnableWebContentEvaluation"=dword:00000000
Thank you. Now added as option three. :shawn:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender

Latest Support Threads

Back
Top Bottom