Windows Defender Not Allowing App to Run: Why & What to Do?

Why Windows Defender Blocking Application?

Windows Defender, officially known as Microsoft DefenderAntivirus, relies on real-time and cloud-delivered protection for comprehensive and multiple-layered protection. It doesn’t just scan for known malware signatures; it evaluates behavior, reputation, and system impact. That means even legitimate applicationsmay get blocked.

Some of the most common Microsoft Defender blocking app errors include: "Windows protected your PC," "Your organization used windows defender application control to block this app," "This app has been blocked for your protection", etc. And possible reasons for Windows Defender not allowing an App to run are:

• The app comes from an unknown or untrusted publisher.
• The file lacks a digital signature or uses outdated certificates.
• The application behaves similarly to known malware.
• The app modifies system files, registry entries, or startup settings.
• The file was downloaded from the internet and flagged by SmartScreen.
• Cloud-based protection marked the app as low reputation.

How Do I Allow an App to Run through Windows Defender?

Allowing an app to run through Windows Defender doesn’t mean turning off security entirely. Microsoft provides to approve apps you trust while keeping real-time protection active. Here is how to allow App in Windows Defender:

Step 1. Go to Control Panel > System and Security, then click Allow an app through firewall under Windows Defender Firewall.

Step 2. Click Change settings on the top right corner to enable modifications, and hit Allow another app > Browse to add the application.

Note: It should be emphasized that when you allow an application to bypass Windows Defender firewall settings, you are essentially creating a potential entry point into your system. Applications with firewall privileges can introduce various security vulnerabilities. Outdated or unpatched applications often contain known vulnerabilities that attackers actively exploit. Even legitimate applications may have security flaws in their network communication methods.

What to Do When Windows Defender Not Allowing App to Run?

In fact, it is not recommended to let Windows Defender allow a program to run directly. But here are some solutionsto stop Microsoft Defender from blocking an app.

Solution 1. Verify Application Security

First, before making any changes to Defender, verify that the app is genuinely safe, which is critical. If the app has no basic security checks, forcing it to run may put your system at risk. You can confirm security by:

• Downloading the app only from its official website
• Checking the publisher’s reputation
• Scanning the file with Defender manually
• Running a second opinion scan using a trusted tool

Solution 2. Add the App to Exclusion

Adding an exclusion tells Defender to ignore a specific file, folder, or process. This is one of the most effective solutions when Windows Defender won't let me run a program persists.

Step 1. Open Windows Security on computer.

Step 2. Select Virus & threat protection on Windows Security's Home tab, and click on Manage settings.

Step 3. Scroll down to the Exclusions tab. Click Add or remove exclusions.

Step 4. Then, click on Add an exclusion and select File to choose the EXE (application) for a program to add to the exclusion list.

Solution 3. Update App to the Latest Version

Outdated software is more likely to trigger Defender warnings. Developers typically update digital signatures and fix behaviors flagged by antivirus tools.

Step 1. Open the Start Menu, search for Microsoft Store and launch it.

Step 2. Select Library on the left, you will find the apps with an update in the Updates and Downloads section.

Step 3. Click Update next to the target App.

For apps not in the Microsoft Store, you may use an option within the app (like Help > Check for Updates) or visit the app developer's site.

Solution 4. Restore the Application from Quarantine

If Defender already quarantined the file, it won’t run regardless of exclusions.In such a case, you will need to restore it manually. Here is also how to see if Windows Defender is blocking an app.

Step 1. Open Windows Security, select Virus & threat protection.

Step 2. Under Current threats, select Protection history.

Step 3. Click on the item that you want to restore to expand it.

Step 4. Click the Allow drop-down menu, and click Allow.

Solution 5. Unblock File via Properties

Windows automatically blocks files downloaded from the internet. Even if Defender allows the app, Windows itself may prevent execution.

Step 1. Right-click the blocked application file, and select Properties.

Step 2. Go to the General tab, tick the Unblock checkbox next to the Security section.

Step 3. Then, click Apply and OK to save the changes.

Solution 6. Temporarily Disable SmartScreen

Microsoft Defender SmartScreen evaluates apps based on reputation. It can block new or uncommon software even if it’s safe.Here is how to stop Windows Defender from blocking an appby temporarily disabling it:

Step 1. Open Windows Security, and go to App & browser control.

Step 2. Under Reputation-based protection, click on Reputation-based protection settings.

Step 3. Turn to Off for the following:

• Check apps and files
• Potentially unwanted app blocking
• SmartScreen for Microsoft Edge
• SmartScreen for Microsoft Store apps

Step 4. Then, run the application and re-enable SmartScreen afterward.

Solution 7. Modify Local Group Policy (Caution)

This method is recommended for advanced users and administrators, as incorrect changes may affect system security.

Step 1. Press Win + R and type gpedit.msc to open the Local Group Policy Editor.

Step 2. Head toward Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

Step 3. Find the User Account Control: Run all administrators in Admin Approval Mode policy, double-click on it, and select Disabled. Click Apply, then OK.

Best Ransomware Protection Software for Windows PCs

Even when Defender works perfectly, no antivirus can guarantee complete protection. Ransomware, zero-day threats, and human error remain major risks. That's why data protection should extend beyond real-time scanning. That’s why you may need a ransomware protection software like AOMEI Backupper.

This fully-featured software focuses on recovery rather than detection. Instead of trying to detect every threat, it protects your data and ensures it can always be restored whenever needed.

You can install this ransomware protection software to protect your data from attacks, following the guide below:

Step 1. Run AOMEI Backupper. Click Tools > Ransomware Protection.

Step 2. Turn on the switch for Enable Ransomware Protection.

Step 3. Tick the option as needed. There are three sub-options:

• Protect Backup Images of AOMEI Backupper: Checked by default to protect created image files created by AOMEI Backupper.
• Protect Specific File Types: Protect common file types like .doc, .xls, .pdf, and so on.
• Protect Specific Files and Folders: Add specific folder paths to protect then from ransomware attack, like D:\Backup, C:\Program Files (x86), etc.

Step 4. Finally, click OK to save it.

Conclusion

On this page, we have presented how to allow an App to run through Windows Defender and 7 methods for Windows Defender not allowing app to run. Also, it provides a powerful ransomware protection tool. Pairing with Windows Defender, you can create system backups, and always protect its safety for recovery easily.