Disabling Windows Defender SmartScreen Process

Discussion in 'Windows 10' started by Super Spartan, Jun 11, 2020.

  1. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,549
    879
    60
    I'm on Windows 10 Build 2004 and I noticed that the Windows Defender Smartscreen process is running even though I have disabled it from the Settings and via Group Policy Editor.

    So I ran these commands but the third command gives me the following error:

    1) takeown /f "%systemroot%\System32\smartscreen.exe" /a
    2) icacls "%systemroot%\System32\smartscreen.exe" /reset
    3) nsudoc -U:T -P:E "%systemroot%\System32\icacls.exe" %systemroot%\System32\smartscreen.exe /inheritance:r /remove *S-1-5-32-544 *S-1-5-11 *S-1-5-32-545 *S-1-5-18

    What am I doing here? I tried searching the entire system for a file named nsudoc and I couldn't find it perhaps that's why it's throwing that error?

    Even by running the first 2 commands, the process is sitll running in the background.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. pm67310

    pm67310 MDL Senior Member

    Sep 6, 2011
    447
    169
    10
    nsudoc false = nsudo
     
  3. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,906
    3,055
    60
    The way you've written the code, nsudoc.exe has to be in the same folder as the script, or in the path, and it's not. Get it here.
    Also in line 3 you're missing quotes in the smartscreen path:
    nsudoc -U:T -P:E "%systemroot%\System32\icacls.exe" "%systemroot%\System32\smartscreen.exe" /inheritance:r /remove *S-1-5-32-544 *S-1-5-11 *S-1-5-32-545 *S-1-5-18
     
  4. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,549
    879
    60
    Sorry I just saw your reply but thanks a lot.

    nsudoc.exe is not in the latest version 8.0 I just checked. I don't know which one of those files I need:

    ScreenShot00114.png

    While I was searching today I found another way to disable it and that worked.

    Code:
    reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f
    
    reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f
    
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
    
    reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "EnableSmartScreen" /t "REG_DWORD" /d "0" /f
    
    reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_SZ /d "Anywhere" /f
    
    reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControlEnabled" /t "REG_DWORD" /d "0" /f
    
    takeown /s %computername% /u %username% /f "%WinDir%\System32\smartscreen.exe"
    
    icacls "%WinDir%\System32\smartscreen.exe" /grant:r %username%:F
    
    taskkill /im smartscreen.exe /f
    
    del "%WinDir%\System32\smartscreen.exe" /s /f /q
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,906
    3,055
    60
    I know version 6.1 has nsudoc.exe because that's the version I use.
     
  6. Super Spartan

    Super Spartan MDL Expert

    May 30, 2014
    1,549
    879
    60
    Got it ! you're the man!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. BAU

    BAU MDL Addicted

    Feb 10, 2009
    943
    2,042
    30
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...