SnapRAID Windows Smart Screen (Blue Box) ======================================== Windows uses a cloud-based reputation system to vet software. Because SnapRAID is a specialized Open Source project, it may not have the "global reputation" required to pass these automated checks silently. Consequently, when running SnapRAID or the SnapRAID Daemon, Windows SmartScreen may display a warning dialog (informally called a "Blue Box") or block execution entirely due to "Malicious binary reputation". Only expensive EV (Extended Validation) certificates can automatically bypass these reputation filters, making them generally unsuitable for free Open Source projects. OPTION 1: THE "RUN ANYWAY" METHOD --------------------------------- When the SmartScreen dialog first appears, click "More info" and then select "Run anyway" to proceed. This dialog only appears for files downloaded from the internet. If Windows is blocking the file silently (e.g. you see an "Application Control policy" error rather than a dialog), skip to Option 2 or 3. "Run anyway" bypasses the check for that launch only. The prompt may reappear after the file is updated or replaced. OPTION 2: PERMANENTLY UNBLOCKING THE FILE ----------------------------------------- If you would prefer to permanently "unblock" a specific file on your machine and prevent the prompt from appearing again, follow these steps: 1. Right-click the executable or installer file (.exe) and select Properties. 2. Stay on the General tab (the default view). 3. Look for the Security section at the very bottom of the window. 4. Check the box labeled Unblock. 5. Click Apply and then OK. Once unblocked, the file is treated as safe by your local system. This method removes the Mark of the Web flag that Windows applies to downloaded files. It is effective against SmartScreen prompts but will not help on managed machines where an Application Control policy (WDAC or AppLocker) is enforced by an administrator. If you do not see an Unblock checkbox, or the block persists after applying it, see the note at the end of this document. OPTION 3: ADDING A PATH EXCLUSION (RECOMMENDED FOR RECURRING BLOCKS) -------------------------------------------------------------------- If Windows continues to block files within your SnapRAID folder, you can add a permanent folder exclusion to Microsoft Defender. Substitute the path below for wherever you keep your SnapRAID binaries (e.g. C:\snapraid). 1. Open Windows Security by searching for it in the Start menu. 2. Select Virus & threat protection. 3. Under "Virus & threat protection settings," click Manage settings. 4. Scroll down to the bottom and click Add or remove exclusions. 5. Click + Add an exclusion and select Folder. 6. Browse to and select your SnapRAID folder (e.g. C:\snapraid). 7. Click Select Folder and confirm any administrator prompts. By excluding this path, Microsoft Defender will no longer subject files inside that folder to reputation-based blocks or SmartScreen warnings. This exclusion applies to Microsoft Defender Antivirus. It does not override Application Control policies (WDAC or AppLocker) enforced by an administrator. If blocks persist after adding the exclusion, see the note below. Only use this method if you are certain that you only place authentic SnapRAID files in that directory. MANAGED OR CORPORATE MACHINES ----------------------------- If none of the above options resolve the issue, your machine is likely subject to an Application Control policy enforced by your organisation's IT department. These policies (implemented via Windows Defender Application Control or AppLocker) operate at the kernel level and cannot be overridden by end users. In this situation you will need to contact your IT administrator and ask them to whitelist the SnapRAID executable, either by file path, or by file hash. Providing them with the official download URL (https://www.snapraid.it) and the file hash may help them process the request.