You just downloaded a legit installer—maybe Notepad++, 7-zip, or a tool from a well-known GitHub repo. Chrome or Edge shows a red warning: "Windows SmartScreen prevented an unrecognized app from starting." You know the file is safe. Your IT guy even told you it's fine. But the download just sits there, blocked and mocking you.
This happens because SmartScreen checks files against a reputation database. If your download is new enough (or from a developer without a digital signature), SmartScreen has never seen it before. The default behavior: block it until enough users run it safely. That can take days or weeks, which is useless when you need that tool now.
Don't disable SmartScreen entirely—that leaves your system exposed to actual malware. Instead, here's the real fix:
Step 1: Locate the blocked file in File Explorer
Open File Explorer (Win+E) and go to your Downloads folder (usually C:\Users\[YourUsername]\Downloads). Find the file. Don't double-click it—that just re-triggers the block.
Step 2: Right-click the file and open Properties
Right-click the file, then choose Properties from the context menu. Wait for the dialog to load—this can take a second on larger files.
Step 3: Unblock the file
In the Properties window, look at the bottom of the General tab. You'll see a Security section with a checkbox labeled Unblock. Check it. Then click Apply and OK.
That's it. Now double-click the file. SmartScreen won't complain because the file is marked as trusted for this machine.
Why this works
When you download a file from the internet, Windows attaches an NTFS alternate data stream (ADS) named Zone.Identifier. The data stream contains a zone ID—3 for the internet zone. SmartScreen reads that and applies its reputation check. Checking the Unblock box removes that data stream, making the file look like it was created locally. SmartScreen then treats it as safe.
You can verify this yourself. Open PowerShell as admin and run:
Get-Item -Path "C:\Users\[YourUsername]\Downloads\blockedfile.exe" -Stream Zone.IdentifierIt'll show the zone info. After unblocking, rerun the command—the stream is gone. Simple and effective.
What if the Unblock checkbox is missing?
This happens on organization-managed PCs or if the file is on a network drive. Here's the workaround:
- Open a command prompt as administrator (right-click Start > Command Prompt (Admin) or Windows Terminal (Admin)).
- Run this command (replace with your actual file path):
powershell -Command "Remove-Item -Path 'C:\Users\[YourUsername]\Downloads\blockedfile.exe' -Stream Zone.Identifier -Force"This does exactly what the checkbox does—deletes the Zone.Identifier stream. The file is now unblocked. No reboots needed.
What if SmartScreen still blocks after unblocking?
Three things to check:
1. The file is still marked as downloaded by another user
If you're on a shared PC, the Zone.Identifier might be set for a different user profile. Delete it for your user only. Or use the PowerShell command above—it targets the current user's file copy.
2. Group Policy is overriding your local setting
IT departments often force SmartScreen to block all unrecognized apps via Group Policy. Run gpedit.msc (Pro/Enterprise only) and check:
Computer Configuration > Administrative Templates > Windows Components > Windows Defender SmartScreen > Explorer
If Configure Windows Defender SmartScreen is set to Enabled with Block behavior, your unblock won't stick. Ask your admin to change it to Warn instead.
3. Your antivirus is double-checking the file
Some third-party AVs (like McAfee, Norton, or Bitdefender) have their own reputation checks. They can block a file even after SmartScreen is bypassed. Check your AV's quarantine or logs. You may need to add an exception in your AV settings.
The quickest fix without admin rights
If you don't have admin rights, and the Unblock checkbox is missing, you're stuck—the PowerShell command needs admin. But you can try this:
Copy the file to your Desktop (or another location). Right-click > Properties > Unblock might appear there because the Desktop's permissions differ. Worth a shot. I've seen it work on enough machines to mention it.
If nothing works, ask your admin to whitelist the file's publisher in Group Policy. That's the cleanest long-term fix anyway.
Final thought
I know this error is infuriating when you're just trying to install a trusted tool. The good news: the unblock trick works 95% of the time. For the other 5%—the PowerShell command or Group Policy check—you've got a path forward. Don't disable SmartScreen globally. That's like leaving your front door unlocked because one friend's key didn't work.