SmartScreen - allow user to run potentially unwanted app

[Marlon Yu]

Anyone know where else to look for SmartScreen settings in Intune?

 

We have an Intune managed PC (so no GPOs) that keep blocking apps downloaded from reputable sites (HP drivers) even though there is no config profile that has any SmartScreen setting in it. The error message is “This app has been blocked by your system administrator” and there is no option to run the app anyway.

 

It does have a Microsoft Defender for Endpoint Baseline profile applied but the settings there for SmartScreen is as per the screenshot below (with the “Block Users from Ignoring SmartScreen warnings” set to Not Configured which should allow the user to run the app). I do realize that I’ve enabled the setting for PUAs to prevent users from turning it off but my understanding is that it should still allow the user to choose to run the app anyway?

 

 

Marlon

 

*** RANGITOTO COLLEGE EMAIL DISCLAIMER ***

The contents of this email and any attachments are confidential and may be legally privileged. If you are not the intended recipient please advise the sender immediately and delete the email and attachments. Any use, dissemination, reproduction or distribution of this email and any attachments by anyone other than the intended recipient is prohibited.

*** RANGITOTO COLLEGE EMAIL DISCLAIMER ***

[Matt Strickland]

I'm using a school-wide profile similar to yours except the last one - "Configure Microsoft Defender SmartScreen to block potentially unwanted apps"

Does the last one override or are yours greyed out as they are not in use?

I don't get those issues with these settings below:

Matt

[Jono Green]

There's a PUA setting under Endpoint Security>Antivirus policy, might not necessarily be SmartScreen at fault.