Your organization used Windows Defender Application Control to block this app

When you try to run files downloaded from the internet, the following error may appear on your Windows 10 computer:

Your organization used Windows Defender Application Control to block this app

In some systems, the same error may pop up also when opening Command Prompt or PowerShell.

Your organization used Windows Defender Application Control to block this app
Your organization used Windows Defender Application Control to block this app

This weird behavior by Windows 10 remains unexplained by Microsoft, but disabling Secure Boot in the BIOS helped many users. Note that this weird behavior may have nothing to do with the latest Feature Update for Windows 10, the Fall Creators Update.

How to disable Secure Boot in UEFI/BIOS Setup

Secure Boot is a feature of many newer EFI or UEFI machines which helps a computer resist attacks and infection from malware, and prevents it from booting into anything but Windows 8/10. When your computer was manufactured, UEFI created a list of keys that identify trusted hardware, firmware, and operating system loader code. It also created a list of keys to identify known malware. When Secure Boot is enabled, the computer blocks potential threats before they can attack or infect the computer.

To disable secure boot, use these steps:

  1. Turn off the computer.
  2. Turn on the computer, then immediately press ESC repeatedly, about once every second, until the Startup Menu opens.
  3. Press F10 to open BIOS Setup for HP and Compaq PCs. The key varies for other brands. It may be DEL, F2 or the F8 key in other systems. The POST screen will tell you which key should be pressed to get into the BIOS setup page. Or you can check the motherboard manual to get that info.
  4. Check the Boot Options or similar setting in the BIOS, and disable the option named Secure Boot. Here is a screenshot that shows how the Boot Options page might look like.
enable or disable secure boot in bios
Secure Boot option in BIOS setup screen
Alternately, to get into the UEFI/BIOS firmware settings page: When Windows is running, press and hold SHIFT, and restart Windows from the login screen. This step gets you to Recovery Options. From the Recovery Options screen, go to Troubleshoot > Advanced Options: UEFI Firmware Settings.

windows 10 advanced recovery options screen
Windows Recovery Environment — Advanced Options screen

Useful Links

  • For HP and Compaq systems, check out this page that explains how to enable or disable secure boot.
  • Neosmart has an excellent guide with exact instructions and screenshots showing BIOS of ASUS, ASRock, HP, and Acer computers or motherboards.

Hope this temporary workaround helps prevent the annoying “Your organization used Windows Defender Application Control to block this app” error on your Windows 8 or Windows 10 computer.

About the author

Ramesh Srinivasan founded Winhelponline.com back in 2005. He is passionate about Microsoft technologies and has a vast experience in the ITeS industry — delivering support for Microsoft's consumer products. He has been a Microsoft MVP [2003 to 2012] who contributes to various Windows support forums.

11 thoughts on “Your organization used Windows Defender Application Control to block this app

  1. Greetings. After spending hours of searching for help and modifying system settings and disabling Windows Defender in Windows 10 Enterprise (which didn’t work as a fix), in the Bios I basically just disabled the Windows UEFI Mode setting and selected Other OS (OS Type) under Secure Boot menu. My option to disable Secure Boot is automatically Enabled and greyed out so I cant disable it, but this method worked great. I have a new pc, just got it recently, its an i5 7400 with an Asustek motherboard H110M-D. I hope I helped out, God bless everyone.

  2. Thank you Milad. You helped me.
    I did this and it fixed my issue:

    > Windows+R then type Firewall.cpl
    > Advanced settings
    > Windows Defender Firewall Properties
    > Turn Firewall state back on (I had turned it off earlier)
    > Change Inbound connections to “allow”, Apply
    > Turn Firewall state to “Off”, Apply

  3. After 3 day of this message popping up. After trying to disable window defender. This is the only thing that help me thank you so much. I have a HP laptop, I turned it off and when I turn it back on I held f10.

  4. I tried for a very long time to fix this issue. I have come up to many solutions that say this, so I have already tried it. It so far has not been working. Do I have to completely reinstall my Windows 10 Pro for it to allow the apps I need?

  5. Hi…I have had this problem but I did it..you just must follow this ..
    Go to Windows defender firewall with advanced security..you can go there by control panel or use of Windows+R and writing Firewall.cpl…there you should find Windows defender firewall properties….on page of Domain profile look at the fire wall state section ..you see that block is preassume of Windows…you should change it to allow.just that.

  6. For those who don’t see the option to disable secure boot, just clear all ur drives and reinstall Windows completely from bios. That’s how I got rid of this bs

Leave a Comment

Share10
Tweet
+1
Share