mirror of
https://github.com/amadvance/snapraid.git
synced 2026-10-25 18:40:19 -04:00
104 lines
3.9 KiB
Text
104 lines
3.9 KiB
Text
SnapRAID Windows Smart Screen (Blue Box)
|
|
========================================
|
|
|
|
Windows uses a cloud-based reputation system to vet software. Because
|
|
SnapRAID is a specialized Open Source project, it may not have the
|
|
"global reputation" required to pass these automated checks silently.
|
|
Consequently, when running SnapRAID or the SnapRAID Daemon, Windows
|
|
SmartScreen may display a warning dialog (informally called a "Blue
|
|
Box") or block execution entirely due to "Malicious binary reputation".
|
|
|
|
Only expensive EV (Extended Validation) certificates can automatically
|
|
bypass these reputation filters, making them generally unsuitable for
|
|
free Open Source projects.
|
|
|
|
|
|
OPTION 1: THE "RUN ANYWAY" METHOD
|
|
---------------------------------
|
|
|
|
When the SmartScreen dialog first appears, click "More info" and then
|
|
select "Run anyway" to proceed.
|
|
|
|
This dialog only appears for files downloaded from the internet.
|
|
If Windows is blocking the file silently (e.g. you see an "Application
|
|
Control policy" error rather than a dialog), skip to Option 2 or 3.
|
|
|
|
"Run anyway" bypasses the check for that launch only. The prompt may
|
|
reappear after the file is updated or replaced.
|
|
|
|
|
|
OPTION 2: PERMANENTLY UNBLOCKING THE FILE
|
|
-----------------------------------------
|
|
|
|
If you would prefer to permanently "unblock" a specific file on your
|
|
machine and prevent the prompt from appearing again, follow these steps:
|
|
|
|
1. Right-click the executable or installer file (.exe) and select
|
|
Properties.
|
|
|
|
2. Stay on the General tab (the default view).
|
|
|
|
3. Look for the Security section at the very bottom of the window.
|
|
|
|
4. Check the box labeled Unblock.
|
|
|
|
5. Click Apply and then OK.
|
|
|
|
Once unblocked, the file is treated as safe by your local system.
|
|
|
|
This method removes the Mark of the Web flag that Windows applies to
|
|
downloaded files. It is effective against SmartScreen prompts but
|
|
will not help on managed machines where an Application Control policy
|
|
(WDAC or AppLocker) is enforced by an administrator. If you do not see
|
|
an Unblock checkbox, or the block persists after applying it, see the
|
|
note at the end of this document.
|
|
|
|
|
|
OPTION 3: ADDING A PATH EXCLUSION (RECOMMENDED FOR RECURRING BLOCKS)
|
|
--------------------------------------------------------------------
|
|
|
|
If Windows continues to block files within your SnapRAID folder, you
|
|
can add a permanent folder exclusion to Microsoft Defender. Substitute
|
|
the path below for wherever you keep your SnapRAID binaries (e.g.
|
|
C:\snapraid).
|
|
|
|
1. Open Windows Security by searching for it in the Start menu.
|
|
|
|
2. Select Virus & threat protection.
|
|
|
|
3. Under "Virus & threat protection settings," click Manage settings.
|
|
|
|
4. Scroll down to the bottom and click Add or remove exclusions.
|
|
|
|
5. Click + Add an exclusion and select Folder.
|
|
|
|
6. Browse to and select your SnapRAID folder (e.g. C:\snapraid).
|
|
|
|
7. Click Select Folder and confirm any administrator prompts.
|
|
|
|
By excluding this path, Microsoft Defender will no longer subject files
|
|
inside that folder to reputation-based blocks or SmartScreen warnings.
|
|
|
|
This exclusion applies to Microsoft Defender Antivirus. It does not
|
|
override Application Control policies (WDAC or AppLocker) enforced by
|
|
an administrator. If blocks persist after adding the exclusion, see the
|
|
note below.
|
|
|
|
Only use this method if you are certain that you only place authentic
|
|
SnapRAID files in that directory.
|
|
|
|
|
|
MANAGED OR CORPORATE MACHINES
|
|
-----------------------------
|
|
|
|
If none of the above options resolve the issue, your machine is likely
|
|
subject to an Application Control policy enforced by your organisation's
|
|
IT department. These policies (implemented via Windows Defender
|
|
Application Control or AppLocker) operate at the kernel level and
|
|
cannot be overridden by end users.
|
|
|
|
In this situation you will need to contact your IT administrator and
|
|
ask them to whitelist the SnapRAID executable, either by file path, or
|
|
by file hash. Providing them with the official download URL
|
|
(https://www.snapraid.it) and the file hash may help them process the
|
|
request.
|