#422 DavMail installer and bundled JRE DLLs blocked by Windows Smart App Control (SAC)

[Zohar Mills Levin]

Hi,

I have been using DavMail for a long time, but I am currently experiencing execution issues on Windows due to Windows Smart App Control (SAC).

Description of the IssueInstaller Blocked:
Running davmail-7.1.0-4498-setup64.exe is blocked by Smart App Control with the message:
"We blocked ... because we could not verify its publisher to confirm it was safe to run."
Startup Crash (nio.dll): Running davmail64.exe fails to start silently in the background because SAC blocks nio.dll in the bundled JRE.

GUI Windows Crash (freetype.dll):
Right-clicking the tray icon and selecting "Settings" or "About" fails to open any windows because SAC blocks freetype.dll when attempting to initialize font management.

TracesStartup failure trace:

Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: C:\Program Files\DavMail\jre\bin\nio.dll: An Application Control policy has blocked this file [in thread "main"]
        at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
        at java.base/sun.nio.fs.WindowsNativeDispatcher.<clinit>(Unknown Source)
```[cite: 1]

**Settings / About menu click trace:**
```text
Exception in thread "AWT-EventQueue-0" java.lang.NoClassDefFoundError: Could not initialize class sun.awt.Win32FontManager
Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: C:\Program Files\DavMail\jre\bin\freetype.dll: An Application Control policy has blocked this file [in thread "AWT-EventQueue-0"]
        at java.desktop/sun.font.FontManagerNativeLibrary.<clinit>(Unknown Source)
```[cite: 2]

---

Could you please advise if there are plans to digitally sign the installer and bundled JRE binaries to satisfy Smart App Control requirements, or if pointing to a signed System OpenJDK is the recommended path forward?

Thank you!

DavMail Version: 7.1.0-4498 (64-bit)
OS: Windows 10 / 11 (Build 26300.9711)

[Mickael Guessant]

You may want to install DavMail using winget instead:

winget install mguessan.davmail

When we publish the winget package Microsoft scans and validates installer

When downloading the installer directly you can explictly unlock file:

Unblock-File .\davmail-7.1.0-4498-setup64.exe

[Zohar Mills Levin]

Tried this, but still I get the attached error:

[Zohar Mills Levin]

Have not fullty tested this, but I see that when I come back to the laptop, after he was in sleep mode for the night, there is no DavMail icon in the System Tray overflow menu. but the DavMail64.exe is still running