If you or your organization is using Defender for Endpoint, the exclusions are added as URL, IP, or Domin indicators in MDE.
SmartScreen
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EI%3C/text%3E%3C/svg%3E)
ITSec
6
Reputation points
Hello
I have exe application blocked by defender smart screen on computers. How can I add a smart screen exclusion?
Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 24%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MartyWild 26 Reputation points2023-10-20T14:24:14.43+00:00 Has this been resolved? The question was about file reputation/verification detection and the answers are about URL, IP's and Domain exclusions. I'm either not understanding the proposed answers or the original question got never answered. May I ask if you found a proper way to manage these exclusions?
Sign in to comment
3 answers
Sort by: Most helpful
-
Andrew Blumhardt 10,071 Reputation points Microsoft Employee2022-12-15T18:21:19.15+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 23%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
S.Sengupta 27,946 Reputation points MVP2022-12-16T03:08:24.943+00:00 Go through Smart Screen settings:
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#smartscreenallowlistdomains
-
MartyWild 26 Reputation points
2023-10-20T17:01:58.98+00:00 I had the exact same issue. I found that you could create an exclusion using the Submissions process in the M365 Defender portal. Provided the EXE file for analysis. Also I created an Indicator as proposed during the Submission process. In the Defender portal, under Settings \ Endpoint \ Rules \ Indicators, there is an option to add file hashes as exception.
This allowed a custom installer to go through Defender SmartScreen in my environment. Hope this Helps!