Prevent managing SmartScreen Filter

Purpose

Show registry keys (2)

• HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter\EnabledV9
• HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter\EnabledV9

EnabledV9 is a REG_DWORD policy value for Internet Explorer's SmartScreen Filter. It enforces the filter mode and prevents users from changing that mode in Internet Explorer.

With EnabledV9 = 1, Internet Explorer performs automatic reputation checks in security zones for which SmartScreen is enabled. The filter warns about websites known to Microsoft for phishing or malware and can check the reputation of downloaded programs.

With EnabledV9 = 0, automatic reputation checks are disabled. According to Microsoft documentation, users can still initiate a manual website check through Internet Explorer's safety features.

The value under HKLM has computer scope. The value under HKCU applies to the current user.

Notes

Additional effects

When automatic filtering is enabled, the first-run experience does not ask the user whether SmartScreen should be turned on. Internet Explorer first compares addresses with a local list of high-traffic websites. If an address is not on that list, it can be submitted to the Microsoft SmartScreen service. Application-reputation checks can additionally transmit information such as the download URL, a file hash, and digital-signature details.

Security

EnabledV9 = 1 adds reputation-based protection against known phishing sites, malware-hosting sites, and suspicious downloads. This value does not, by itself, prevent users from bypassing a SmartScreen warning. Separate policies, such as “Prevent bypassing SmartScreen Filter warnings,” control warning overrides.

EnabledV9 = 0 removes Internet Explorer's automatic reputation-based warning layer. Known dangerous websites or downloads can therefore be opened or downloaded without a SmartScreen warning unless another security control blocks them.

Automatic checks can transmit full URLs and download-related information to Microsoft. Depending on a website's URL design, a submitted URL might contain personal information. Communication with the SmartScreen services is encrypted using HTTPS.

Possible side effects

When the filter is enabled, websites or downloads classified as unsafe or unrecognized can produce warnings even when their content is legitimate. Disabling the filter removes these automatic warnings and reputation checks.

Notes

This setting belongs to Internet Explorer. It does not control SmartScreen in the current Microsoft Edge browser, which uses separate policies and the SOFTWARE\Policies\Microsoft\Edge registry path.

An EnabledV9 value in the policy branch is distinct from an unmanaged preference with the same name: in this location, the SmartScreen mode is enforced through computer or user policy.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – PreventManagingSmartScreenFilter

Microsoft Learn: Manage Privacy—SmartScreen Filter and Resulting Internet Communication

Microsoft Learn: Microsoft Edge policy—SmartScreenEnabled

See also

• Entry in the reference