Bug: Last release is blocked by Smart app control without any way to bypass it

[ftt-prod]

Hi guys!
Last release gives me a smart app control warning, but i cannot bypass it.

"Ok" closes the window,
"Send comments" sends you to the comment hub
"Store" to the microsoft store and... that's it.

I have no other choice, i don't have "continue anyway" or whatever.

I cannot screenshot as the pop appears on top of the capture tool window.

Win pro 11
25H2
26200.7623

Fresh Hass agent install.

Just to let you know

Edit:

I found a google image of what it looks like:

[amadeo-alex]

First thing I do on my Windows PCs is to turn off smart screen and other annoyances as this :D
That aside, do you have an option to unblock the file? https://www.elevenforum.com/t/unblock-file-downloaded-from-internet-in-windows-11.1125/

[OzoneActionDay]

I just tried it again this morning and it works now so it seems like this issue has gone away (at least for me).

I think that Microsoft has tightened the screws more and more when it comes to this weirdly-named Smart App Control feature. You used to be able to bypass that check for certain files but you can't do that any longer. You do have ability to turn off Smart App Control entirely but then you get into a weird situation where you can never turn it back on again (my understanding is that once you turn it off Windows can't guarantee that your system wasn't compromised and so it won't allow you to enable it again).

It also seems that it takes some time for Microsoft to vet new versions of executable files so that they're not flagged by SAC. I'm not exactly sure how that happens but it seems to have something to do with reputation of the code signer and popularity of the executable. Maybe when enough people are stopped by SAC it triggers a more in-depth scan and then whitelists the file? Nobody really knows, and I'm guessing that's by design.

Anyway, in this case it seems that SAC is no longer flagging this for me and I'm able to once again run HASS.Agent without any issues. @ftt-prod, does it work for you now?

[rvanmaanen]

Except for a few driver updates I'm running the very latest version of Windows 11 and for me the blocking is still happening. As I would like to install this on my work laptop (and my own desktop pc) I really should not disable SAC.. The shitty thing is you can't disable it for a single app, you can't even disable and then re-enable without reinstalling Windows :(

It would be great if you could just have the executable signed:

How can I tell Smart App Control to let this one specific app through?
There is currently no way to bypass Smart App Control protection for individual apps. You can turn Smart App Control off, or (better yet), contact the developer of the app and encourage them to sign their app with a valid signature.

[ftt-prod]

I just tried it again this morning and it works now so it seems like this issue has gone away (at least for me).

I think that Microsoft has tightened the screws more and more when it comes to this weirdly-named Smart App Control feature. You used to be able to bypass that check for certain files but you can't do that any longer. You do have ability to turn off Smart App Control entirely but then you get into a weird situation where you can never turn it back on again (my understanding is that once you turn it off Windows can't guarantee that your system wasn't compromised and so it won't allow you to enable it again).

It also seems that it takes some time for Microsoft to vet new versions of executable files so that they're not flagged by SAC. I'm not exactly sure how that happens but it seems to have something to do with reputation of the code signer and popularity of the executable. Maybe when enough people are stopped by SAC it triggers a more in-depth scan and then whitelists the file? Nobody really knows, and I'm guessing that's by design.

Anyway, in this case it seems that SAC is no longer flagging this for me and I'm able to once again run HASS.Agent without any issues. @ftt-prod, does it work for you now?

Thanks @ekashuba for your answer!

It just worked yesterday, still flagging it, but at this time I hadn't Internet connection, so the pop up said something like "since you're not connected we cannot check online if it is safe or not blablabla" and then the "ok" button let me install it.

But I tried like 2-3 days ago with an active internet connection, and the Ok button only closed the pop, and not launching the setup.

Microsoft pushes different builds of Windows. You can have the exact same windows 11 pro freshly installed and they won't be the exact same.

@rvanmaanen Try without an active internet connection w just to see if I was lucky or if you can workaround like this

[rvanmaanen]

I just tried it again this morning and it works now so it seems like this issue has gone away (at least for me).
I think that Microsoft has tightened the screws more and more when it comes to this weirdly-named Smart App Control feature. You used to be able to bypass that check for certain files but you can't do that any longer. You do have ability to turn off Smart App Control entirely but then you get into a weird situation where you can never turn it back on again (my understanding is that once you turn it off Windows can't guarantee that your system wasn't compromised and so it won't allow you to enable it again).
It also seems that it takes some time for Microsoft to vet new versions of executable files so that they're not flagged by SAC. I'm not exactly sure how that happens but it seems to have something to do with reputation of the code signer and popularity of the executable. Maybe when enough people are stopped by SAC it triggers a more in-depth scan and then whitelists the file? Nobody really knows, and I'm guessing that's by design.
Anyway, in this case it seems that SAC is no longer flagging this for me and I'm able to once again run HASS.Agent without any issues. @ftt-prod, does it work for you now?

Thanks @ekashuba for your answer!

It just worked yesterday, still flagging it, but at this time I hadn't Internet connection, so the pop up said something like "since you're not connected we cannot check online if it is safe or not blablabla" and then the "ok" button let me install it.

But I tried like 2-3 days ago with an active internet connection, and the Ok button only closed the pop, and not launching the setup.

Microsoft pushes different builds of Windows. You can have the exact same windows 11 pro freshly installed and they won't be the exact same.

@rvanmaanen Try without an active internet connection w just to see if I was lucky or if you can workaround like this

Thanks for the highlight! You're right, it does work with SAC flagging it now. No need to disable my internet connection or any other workarounds.