Fix SmartScreen Prompt Returning After You Click Run Anyway on Windows 11

You download a trusted installer, right-click it, and select Run anyway. But Windows SmartScreen blocks the same file again on the next launch. This loop wastes time and raises doubts about the file’s safety. The root cause is a Windows Defender reputation cache that flags the file as unrecognized each time it starts. This article explains why SmartScreen repeats the prompt and gives you a permanent fix using file properties, Group Policy, or PowerShell.

Why SmartScreen Blocks the Same File Repeatedly After You Click Run Anyway

When you download a file from the internet, Windows 11 attaches a hidden data stream called the Mark-of-the-Web. This stream tells SmartScreen that the file came from an untrusted zone. Even after you click Run anyway, Windows does not automatically remove this mark. The next time you double-click the file, SmartScreen reads the mark again and shows the same warning.

The SmartScreen prompt is not a one-time override. It is a per-launch check. The Run anyway option only bypasses the warning for that single session. On the next launch, the check repeats because the Mark-of-the-Web is still present on the file. This behavior is by design to protect against files that change after the first run, such as polymorphic malware or repacked installers.

How the Mark-of-the-Web Works

The Mark-of-the-Web is stored as an NTFS alternate data stream named Zone.Identifier. When you download a file using Microsoft Edge, Google Chrome, or Mozilla Firefox, the browser writes this stream with a zone ID of 3 (Internet). Windows Explorer, SmartScreen, and Microsoft Defender all read this stream to decide whether to show a security prompt. Removing the stream tells Windows the file is safe.

Why Some Files Still Trigger SmartScreen After Unblocking

If you unblock a file but SmartScreen still blocks it, the file may be flagged by a cloud-based reputation check. This happens when the file has a low reputation score on Microsoft’s servers. In that case, you need to add the file to the Windows Defender exclusion list or submit the file to Microsoft for analysis.

Steps to Permanently Remove the SmartScreen Prompt for a Trusted File

The following methods remove the Mark-of-the-Web or disable the SmartScreen prompt for a specific file. Choose the method that matches your environment.

Method 1: Unblock the File from Properties

1. Locate the blocked file
   Open File Explorer and navigate to the folder containing the installer or script.
2. Open file Properties
   Right-click the file and select Properties from the context menu.
3. Go to the General tab
   In the Properties dialog, click the General tab. Look for a Security section at the bottom of the tab.
4. Check the Unblock checkbox
   If the Security section contains a checkbox labeled Unblock, select it. Click Apply and then OK.
5. Verify the fix
   Double-click the file. SmartScreen should not appear. If it does, restart Windows and try again.

Method 2: Unblock a File Using PowerShell

1. Open Windows PowerShell as administrator
   Right-click the Start button and select Windows Terminal Admin. If prompted by User Account Control, click Yes.
2. Run the Unblock-File cmdlet
   Type the following command and press Enter: Unblock-File -Path "C:\Users\YourUsername\Downloads\installer.exe" Replace the path with the full path to your file.
3. Unblock multiple files at once
   To unblock all files in a folder, run: Get-ChildItem -Path "C:\Downloads\" | Unblock-File This removes the Mark-of-the-Web from every file in the Downloads folder.
4. Confirm removal
   Run Get-Item -Path "C:\Downloads\installer.exe" -Stream Zone.Identifier If the command returns no output, the stream was removed.

Method 3: Disable SmartScreen for Downloaded Files Using Group Policy

This method applies to Windows 11 Pro, Enterprise, or Education editions. Home edition users can use the Registry method instead.

1. Open Group Policy Editor
   Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to SmartScreen settings
   Go to Computer Configuration > Administrative Templates > Windows Components > Windows Defender SmartScreen > Explorer.
3. Open Configure Windows Defender SmartScreen
   Double-click the policy named Configure Windows Defender SmartScreen.
4. Enable and set to Disable
   Select Enabled. In the Options area, set the SmartScreen for Store apps and for downloaded files to Disable. Click Apply and OK.
5. Restart the computer
   Close Group Policy Editor and restart Windows for the change to take effect.

Method 4: Disable SmartScreen via Registry

1. Open Registry Editor
   Press Windows + R, type regedit, and press Enter. Click Yes in the UAC prompt.
2. Navigate to the SmartScreen key
   Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System. If the System key does not exist, right-click the Windows key, select New > Key, and name it System.
3. Create a DWORD value
   Right-click in the right pane, select New > DWORD 32-bit value, and name it EnableSmartScreen.
4. Set the value to 0
   Double-click EnableSmartScreen, set the Value data to 0, and click OK.
5. Restart Windows
   Close Registry Editor and restart the computer.

If SmartScreen Still Prompts After Applying the Fix

Some files trigger SmartScreen even after the Mark-of-the-Web is removed. This happens when the file is blocked by a cloud reputation lookup or by Windows Defender Antivirus.

File Blocked by Windows Defender Antivirus

Open Windows Security > Virus & threat protection > Protection history. Look for an entry that shows the file was blocked. If you trust the file, click Actions and select Allow on device. This adds the file to the exclusion list.

SmartScreen Prompt Appears for Files on Network Shares

Files accessed over a network may not have a Mark-of-the-Web, but SmartScreen still checks them. To bypass this, add the network share to the trusted sites list in Internet Options > Security > Local intranet > Sites > Advanced. Then restart the file.

SmartScreen Prompt Appears for Signed Installers

Even digitally signed files can trigger SmartScreen if the certificate is new or not widely used. In this case, submit the file to Microsoft at the Microsoft Defender Security Intelligence portal. After a few hours, the reputation score updates and SmartScreen stops blocking it.

File Properties Unblock vs Group Policy Disable: Which Fix Works Best

Item	Unblock via File Properties	Disable via Group Policy
Scope	Single file	All files on the device
Persistence	Permanent for that file	Permanent until policy reverted
Security impact	Minimal — only the unblocked file is trusted	High — all downloaded files skip SmartScreen
User account required	Standard or admin	Administrator
Edition support	All Windows 11 editions	Pro, Enterprise, Education only

To remove the SmartScreen prompt for a single trusted file, use the Unblock checkbox or the Unblock-File PowerShell cmdlet. To disable SmartScreen for all downloaded files on a managed device, use Group Policy. For Home edition devices, use the Registry method. After applying any fix, test the file by launching it twice in a row. If the prompt still appears, check Windows Defender protection history for a separate block.