This policy setting allows you to manage the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning users before running unrecognized programs downloaded from the Internet. Some information is sent to Microsoft about files and programs run on PCs with this feature enabled. If you enable this policy setting, Windows SmartScreen behavior may be controlled by setting one of the following options: - Require approval from an administrator before running downloaded unknown software - Give user a warning before running downloaded unknown software - Turn off SmartScreen If you disable or do not configure this policy setting, Windows SmartScreen behavior is managed by administrators on the PC by using Windows SmartScreen Settings in Action Center. Options: - Require approval from an administrator before running downloaded unknown software - Give user a warning before running downloaded unknown software - Turn off SmartScreen Countermeasure: The most restrictive configuration for this policy setting is to enable it and select the "Require approval from an administrator before running downloaded unknown software" option. Potential Impact: If you enable this policy setting, Windows SmartScreen behavior may be controlled by setting one of the following options: - Require approval from an administrator before running downloaded unknown software - Give user a warning before running downloaded unknown software - Turn off SmartScreen If you disable or do not configure this policy setting, Windows SmartScreen behavior is managed by administrators on the PC by using Windows SmartScreen Settings in Action Center."

[Warn and prevent bypass/Warn, enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!EnableSmartScreen (3) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!ShellSmartScreen