# Unblock URL From Smart Screen

Investigate a URL block attributed to SmartScreen rather than the firewall filter, then review the recorded category-dispute and allow-list route. Adding an allow indicator requires the recorded Security Administrator elevation.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

1.  **Confirm that the cause** is Smart Screen and not your firewalls web filter. To do this you can perform an Advanced Hunt.

Link to [URL Blocked by SmartScreen – Advanced Hunting](https://security.microsoft.com/v2/advanced-hunting?query=H4sIADnJw2gAA91Ya0_jRhS9nyv1P1hZsQKxzpNA2CqqILAtarqsICwfV46dQJa8ajuwSPvje-6Z8YPEIdBWalVZscczd-499znXqUhFfpVzuRZHeni-lx_lB8xVpCZlzF3KQGI8Y7nFyJF78WQsC45nMsytXMmFdC1FKCPc-6DUlT7uY1A_kHpmZ7KdD7j3JcKemO-PoFlwfoTZ23RXhFXl7XNuiLkQGBO8deLtFVBOSGmQhBh7EgDPY8rDIdIZqO9AFXC_wRKl3B1eHVBNcA1kSqsoTn2W5Dvxqj5G0gXuKle5XGFujDkf77rPA_cpeDvYrSulVMpHeKAnp_CCIyfYOQTtAhSx9USm0wXGU7mhrBF5NfC7JaIQ75ldOrh-J79zjM7J-xYcY5mD7j1pfFwTvPnkMINE5aC296jPHHMjYi9Tiwn2ZDaqcORipLoNcVXkC3h41pMxaWrSxP2Edi5jLQLXb_IzngazT9vralu25ECOqW8T3Kr46dgFjxZ--xjtYVbt48J3B7iqGA0548MSHtZbGO1htU5uJ_IWsz6wjOiFNqUp7rfwW4D3mLreMN63sKsFq13KrvWDejygd8vcPyDXDvC1IMMDvWJoAsU-xoegVYw-3nTuEBwaoNBRE9cAT5XQ4K4W9qvED4iUaS4WdzET0tq7QDIhvphjn15RTAbFAcZVXH1Y5wByXUZODbOKomHxtCCjTztqbjaJYYhfDfz6XDMotqiBscuMuXxD77eJtmFX5hbPiNYzHlOf7INbgJHyUOkB5BocdWuDFlYMykNQVyl9HzOHxNkgDvWY4VkHReJBlau5nflxiKdWmTyKFnVSTk16w6XWDRs3GgV1yt6jD1ysKMIaqatY9_CuvjRSkzxKnhc2HkLa32cGOMzGwOZ9PqKjXEU1a3PiVi062KUZdEMrPzIzr5lzxRU3Yq5Pc2ubODqsVYotwbCc-WNbVaaI6wm4-4y4iLU9n-2qqwsUmsnBUka4dpxViYqt6S7mQlsFM5-5uN9z5z1mBqB9g7WQVjNnRmTrUFzA281lSFafe9gRUpcY59mClCNWSEd-QyZ3ad0uud6lKy-v__9Vu-lZdk8Pm_rpAmlee9fq6D7LOdHyFCfQCc_yiHIczHzDjgGrQBLvDrgkp910xXr_lsWS03Vgo8RUhthiV1u8sbsN94Tfqn7LGX-Z2twvyLpR2uck0XSc2mMdh-cu7SQ-r3RZRX7YXFEMty71v0u7I9PTJRESpVI_kf-E_URkI8No-wewjJhfmX_b_6sr0eqa0WQ6vSyaHJyKy9FkbNZhLMWM3U_snNTHjxt8vM7vemV9W8b5jHGrnD3OhNZr-b15-iwCu_Rm_LeQ6HMs5jtgYXvZNrvegJ1jGTno4a7RsWBvt8DaT9yn3VMS96esXlP2g7q23DMf5SpSDzac2-5Wo3AbHLMeKN8Bme762tYW45uSvCM-kzVjVotYfgEupQpQ5VSbB1ryDn5brYjHT2paSXYKEb-my0_2a8WJbSXSnPPoTZXygbk9Zo9jLDxPV7_IV9bKKSxxBArTuxqsWivye3fWyCqu5W0x31cRz2Bjv-21uMqFXHZo783V6LWyNnEs9sr2mkhq26h9TRxlnV2x9Va9XXqSiRo5jj0XNuH656J1uR99zicv0SCxsukdvlrZep6M2GGaL78J1jUO8jn_kfMDzhdpn8TN0yzS2TN6IeY_CclZZXQ3fXVka_JTGcprTt1icAg4V-S5l8Truxdg-Ey-yWl5xi-SmaXRaqgaZ_g28ztiRZ3ZHu4K6KZ_Yd85zrDES2e5M3s5U4o8VRwRpoaoDNf-X_HdxnVgO8U-o2k1IhxS6H8LfwJG7GQ1bBIAAA&timeRangeId=3-hours)

1.  **Look up some reports** by replacing the domains in red with your target domain.

On those report pages look for "Category name" heading inside the Domain Details heading. (See screenshot below circled in red) "Category Name" may not be there, but if it is, it may give you a clue as to why it is being blocked. There should be a link underneath it to **dispute the Categorisation** and submit to MS. (See small green arrow in screenshot.

\*\*Full URL: \<\*\*security.microsoft.com/url/overview?url=addschoolhere.state.edu.au\> **Domain**: \<security.microsoft.com/domains/overview?urlDomain=addschoolhere.state.edu.au\>

<https://security.microsoft.com/domains/overview?urlDomain=addschoolhere.state.edu.au>

[Screenshot retained for review](../../review/Review-status.md#asset-c5085b66f9fd09194c8b)

**NOTE**: Step 5 (**Add Domain/URL to Allow List**) will require **PIM Elevation** to Security Administrator

1.  Go To your PIM page. Wait until fully activated before continuing to Step 3.

[<https://portal.azure.com/#view/Microsoft_Azure_PIMCommon/ActivationMenuBlade/~/aadmigratedroles>](https://portal.azure.com/#view/Microsoft_Azure_PIMCommon/ActivationMenuBlade/~/aadmigratedroles)

1.  **Open a new browser window in In-Private or Incognito mode**.
2.  **Add Domain/URL to Allow List**

## Via the Menu System

A\) [<https://security.microsoft.com/>](https://security.microsoft.com/)

B\) Follow the side menu

Expand System -\> Click Settings -\> Click EndPoints -\> (Look below) Rules -\> Click Indicators -\> Click the "URLs/Domains" tab

C\) Press Add item button **OR** **Go Direct to the** "URLs/Domains" tab via this link [<https://security.microsoft.com/securitysettings/endpoints/custom_ti_indicators?tid=912e9bd6-236e-46f5-9c0c-b99867e6b99b&childviewid=url>](https://security.microsoft.com/securitysettings/endpoints/custom_ti_indicators?tid=912e9bd6-236e-46f5-9c0c-b99867e6b99b&childviewid=url)

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)