✅ Enable Microsoft Defender SmartScreen in Windows (File Explorer and app launch) and stop users overriding its warnings.

➡️ These settings were previously in the retired App control ASR profile and have moved to a settings catalog policy.

✅ Devices: All Windows 10 / 11 devices
🚫 Exclusions: None

✅ Files and apps downloaded from the internet and opened from Windows
✅ Type: Settings catalog › SmartScreen

➡️ Files with a malicious or unknown reputation are checked before they run, and users cannot click through the warning.

🚫 SmartScreen in Microsoft Edge (configured in E8‑User Application Hardening – Edge Hardening)
🚫 Phishing protection for password entry
🚫 Application control rules

✅ Enabled
✅ Assigned to all devices

✅ Supports Application Control and User Application Hardening by blocking untrusted downloads
ℹ️ Inforcer Best Practice control applied at all maturity levels

This policy ensures that:

✅ Windows checks downloaded files before they run
✅ Users cannot ignore a malware warning

This is a low‑impact, high‑value protection against malicious downloads.