question

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 asked Reza-Ameri commented

Windows Defender Smartscreen Whitelist

I have an exe located in local appadata of users that is getting blocked by Windows Defender Smartscreen. I have added the SHA 256 of the file in the Indicators on the Defender Portal, but even that doesn't seem to work. Is there any other way to whitelist or trust the app?

windows-10-securitymem-intune-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Reza-Ameri avatar image
0 Votes"
Reza-Ameri answered Reza-Ameri commented

You may open start and search for Windows Security and click on Virus & threat protection then click on Manage settings and you may add it under Exclusion.
If you believe your file is safe and incorrectly detected as a malware, then report it as incorrect detection to the Microsoft:
https://www.microsoft.com/en-us/wdsi/filesubmission

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

The policies are being applied using Intune. I already submitted the file for analysis and MS cleared it from detection. However, the issue persists. I am trying a couple of things right now and shall update this thread as soon as I make any kind of headway.

0 Votes 0 ·

Thank you for sharing, make sure enable the Cloud-delivery Protection on the client using the Intune policy, sometimes when a file marked as safe might not release in the signature right away but it will be in the cloud and when this is on, it will clear the issue. Normally when you set the exclusion policy it should be enforced, have you checked the client to see if it been added to the Windows Security?

0 Votes 0 ·

Yup, amongst other exclusions that are working as expected. A case has been opened with MS support.

0 Votes 0 ·
Show more comments