Skip to content
Setup FoundrySetup Foundry

Documentation

Turn on SmartScreen Filter scan

This setting controls whether SmartScreen Filter scans webpages in the Locked-Down Internet Zone for malicious content.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3\2301
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3\2301

This setting controls whether SmartScreen Filter scans webpages in the Locked-Down Internet Zone for malicious content. It is part of the Internet Explorer security-zone model.

The 2301 value uses the REG_DWORD type. A value of 0 enables scanning, while 3 disables it. When the policy is not configured, the user can choose whether SmartScreen scans pages in this zone.

Notes

Security

When scanning is enabled, SmartScreen can warn about webpages that it identifies as malicious. Disabling the setting removes this zone-specific check and can therefore reduce protection against malicious webpages.

This setting does not determine whether users may bypass a SmartScreen warning; separate policies control that behavior. It also does not enable other SmartScreen capabilities or every check applied to downloads and executable files.

Notes

The Locked-Down Internet Zone is the counterpart of the regular Internet Zone used by Internet Explorer security features that apply more restrictive zone settings. This setting therefore has an effect only when the locked-down zone is evaluated.

In Internet Explorer 7, the same setting controlled the former Phishing Filter. The Internet Explorer 11 desktop application has been retired on certain Windows versions; this setting remains part of the legacy Internet Explorer policy model and is not equivalent to the current Microsoft Edge SmartScreen policies.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – LockedDownInternetZoneAllowSmartScreenIE

Microsoft Learn: Internet Explorer 11 lifecycle

See also