Policy
Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Configures the list of Microsoft Defender SmartScreen trusted domains. This means: - Microsoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains. - The Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains. If you enable this policy, Microsoft Defender SmartScreen trusts these domains. If you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources. This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via mobile device management (MDM) or joined to a domain via MCX. Note: If your organization has enabled Microsoft Defender for Endpoint, this policy and any allowlists created with the policy are ignored. You must configure your allowlists and blocklists in Microsoft 365 Defender portal using "Indicators" (Settings > Endpoints > Indicators). Example value: mydomain.com myuniversity.edu
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings ID SmartScreenAllowListDomainsDesc | list | Path Software\Policies\Microsoft\Edge\SmartScreenAllowListDomains Value name 1, 2, … Type REG_SZ | List: standard |