Windows blocking Roon and issues with DFF/ISO files (ref#L5MUFM)

What app are you having the slowness issue with?

· Roon

What kind of performance/speed issue are you experiencing?

· The app is crashing

Please try to reboot your Roon Server

· No, the issue is still the same even immediately after a reboot

Please try to reboot your networking gear (Router/Switches/etc.)

· No, the issue is still the same even after a reboot

Is there any change in behavior if you try to navigate to Roon Settings -> Library and set both Background and On-Demand Audio Analysis to Throttled or Off?

· No, the issue is still the same

Does the issue happen on multiple Roon Remotes (controllers) or just one?

· I only have one Roon remote to test with

Please try to restart your Roon Remote (controller) app

· No, the issue is still the same even after a restart

What is the operating system of your Roon Remote (controller)?

· Windows

Reinstall Windows/MacOS Roon Remote App

· Yes, reinstalling the Roon app solved the issue

Router Domain Name System (DNS) change

· I was able to change my router's DNS servers but it did not help

What is the operating system of your Roon Server host machine?

· Windows

Timestamp of issue occurrences

· 我没有留意时间,但使用时间roon后台可以查询到。

Describe the issue

Roon已被Windows阻止,无法使用。重新安装Roon可以暂时解决此问题,但重新启动计算机会导致阻止重新出现。这种阻塞行为的发生有多个实例(3—4个类似的问题)。此外,Roon无法识别存储在客户硬盘驱动器上的DFF和ISO文件。在识别DFF文件的情况下,Roon报告不支持这些文件的播放。

Describe your network setup

网络方面没有问题,目前主要是Windows系统会阻止roon的几个文件运行,防火墙也关闭了,也无法恢复正常,只能重新安装后可以运行,但再次重启电脑后,还是那几个文件被Windows系统阻止运行。

Translation…

Timestamp of issue occurrences

· I didn’t pay attention to the time, but you can check the usage time in the background.

Describe the issue

Roon has been blocked by Windows and is unusable. Reinstalling Roon temporarily resolves this issue, but restarting the computer causes the block to reappear. This blocking behaviour has occurred on multiple occasions (3–4 similar issues).

Furthermore, Roon cannot recognise DFF and ISO files stored on the client’s hard drive. In the case of DFF files that are recognised, Roon reports that it does not support playback of these files.

Describe your network setup

There are no network issues. The problem is mainly that Windows is blocking several of Roon’s files from running. The firewall is also disabled, but it won’t return to normal. A reinstallation allows it to run, but after a computer restart, the same files are again blocked by Windows.

That will be a false positive from Windows Defender, I’d suggest white listing that file.

This Roon support page may help … note only non-compressed DSD is supported…

DFF and ISO files

Roon does not use ISO. DFF, if it is a product of ripping, might have a bad information header, which Roon cares about, but, other programs might not. As a test, suggest using a program to change the DFF to DSF and see if the track is recognized.

这句话我没看懂,怎么使用白色列举出来?

Thank you!

Google “Windows Defender how to whitelist a file?”

The online description is quite comprehensive.


在谷歌上搜索"Windows Defender 如何将文件加入白名单?"

网上的说明相当详尽。

已经试了白名单,但还是被强行阻止,所以不知道该怎么办了。谢谢您。

Hi @859731836,

You can follow the instructions in this guide. There are a few background processes associated with Roon, namely RoonAppliance.exe, Roon.exe, and RAATServer.exe, that you’ll also need to whitelist.

Take this step in any third-party network security as well. Roon requires access to the loopback ethernet interface to communicate with your local drivers.

We’ll watch for your reply. Thank you!

您可以按照本指南中的说明进行操作。Roon 涉及几个后台进程(即 RoonAppliance.exe、Roon.exe 和 RAATServer.exe),您也需要将它们加入白名单。请在任何第三方网络安全软件中也执行此步骤。Roon 需要访问回环(loopback)以太网接口,以便与您的本地驱动程序进行通信。

尝试了,还是失败了,RoonAppliance.exe这个找不到,所以没法加入防火墙排除名单里。

Hi @859731836, thanks for the screenshots, they’re very helpful. Two things are going on here.

1. Why you can’t find RoonAppliance.exe

It isn’t a separate download, it lives inside the RoonServer folder. Rather than hunting for each .exe, the easiest fix is to exclude the whole folders. Your exclusion list currently has the Roon folder plus Roon.exe and RoonServer.exe, but it’s missing the RoonServer folder, which is where RoonAppliance.exe, RAATServer.exe, and the blocked .dll files actually sit.

Please add this folder as an exclusion:

C:\Users\wuhao\AppData\Local\RoonServer

To find RoonAppliance.exe directly, paste this into the File Explorer address bar and press Enter:

%localappdata%\RoonServer\Application

(AppData is a hidden folder, which is why it wasn’t showing up.)

2. The real cause of the block

The pop-ups say Windows “couldn’t verify who published Roon.Broker.Core.dll / Roon.ServiceProxy.Base.dll.” That message doesn’t come from the antivirus scanner, it comes from Smart App Control (Windows 11), which blocks files it can’t verify regardless of your Defender exclusions. That’s why whitelisting hasn’t worked.

Please check: Windows Security → App & browser control → Smart App Control.

  • If it shows On or Evaluation, that is what's blocking Roon Server.
  • Important: turning Smart App Control off is a one-way change, Windows won't let you turn it back on without resetting/reinstalling Windows, so decide carefully before doing so.
If Smart App Control is already Off, look just below it under Reputation-based protection → Check apps and files and try turning that off temporarily to confirm it's the culprit.

Suggested order:

  1. Add the RoonServer folder exclusion (above).
  2. Check Smart App Control / Reputation-based protection.
  3. Restart the PC and confirm whether the block reappears.
  4. If it still returns, do a clean reinstall of the latest Roon build — the unverified DLLs can be a sign of a partial/corrupted install.
Let us know what you find at step 2 (a screenshot of the Smart App Control screen would help). Thank you!
您好,感谢您提供截图,非常有帮助。这里其实有两个问题。

1. 为什么找不到 RoonAppliance.exe

它不是单独下载的程序,而是位于 RoonServer 文件夹内部。与其逐个查找每个 .exe,更简单的办法是直接排除整个文件夹。您当前的排除列表里有 Roon 文件夹以及 Roon.exeRoonServer.exe,但缺少 RoonServer 文件夹——RoonAppliance.exeRAATServer.exe 以及被拦截的 .dll 文件都在这里面。

请将以下文件夹加入排除项:

C:\Users\wuhao\AppData\Local\RoonServer

如果想直接找到 RoonAppliance.exe,请在文件资源管理器地址栏粘贴以下路径并回车:

%localappdata%\RoonServer\Application

(AppData 是隐藏文件夹,所以之前看不到。)

2. 真正拦截的原因

弹窗提示 Windows “无法确认谁发布了 Roon.Broker.Core.dll / Roon.ServiceProxy.Base.dll”。这条提示并不是杀毒扫描发出的,而是来自 智能应用控制(Smart App Control)(Windows 11 功能)。它会拦截无法验证的文件,且不受 Defender 排除项影响——这就是为什么加入白名单也没用。

请检查:Windows 安全中心 → 应用和浏览器控制 → 智能应用控制(Smart App Control)。

  • 如果显示为 开启(On)评估中(Evaluation),那它就是拦截 Roon Server 的原因。
  • 注意:关闭智能应用控制是不可逆的——Windows 在不重置/重装系统的情况下无法再次开启,所以关闭前请慎重考虑。
如果智能应用控制已经是关闭状态,请查看它下方的 基于信誉的保护 → 检查应用和文件,尝试暂时关闭,以确认是否是它导致的。

建议按此顺序操作:

  1. 添加 RoonServer 文件夹排除项(见上)。
  2. 检查智能应用控制 / 基于信誉的保护。
  3. 重启电脑,确认拦截是否再次出现。
  4. 如果仍然出现,请彻底卸载后重新安装最新版 Roon——无法验证的 DLL 往往是安装不完整/损坏的迹象。
请告诉我们第 2 步的结果(如果能附上智能应用控制界面的截图会更好)。谢谢!

按照您的指导,目前运行正常了,HQpaly也正常连接上了。还想咨询一下,目前使用笔记本当roon core,由于使用Rose rs130作为网桥输出给dac,130是带了sfp的lan口,我想买一台nuc,但没有找到带sfp的nuc,不知道可以使用带sfp的小主机吗?cpu选择1240p或者12600h,安装rock roon系统,不知道rock能识别82599或者x710的sfp网卡吗?

Hey @859731836,

很高兴听到现在一切运行正常,HQPlayer 也顺利连接上了!

关于 NUC 的问题——好消息是,您不必特意去找带 SFP 口的机器。您的服务器并不需要一个与 RS130 相匹配的 SFP 口。以下几点供您参考:

1. 服务器端不需要 SFP。 RS130 的 SFP 网口只需与您的 Roon Server 处于同一个网络即可,不需要与服务器直接对接。您可以用普通的千兆网口把 NUC 接到交换机或路由器上,再把 RS130 通过 SFP 接到同一台交换机。交换机会自动在铜缆和光纤之间桥接,两台设备之间的通信完全没有问题。

2. 这里用 10GbE/SFP 对音频没有任何好处。 即使是 DSD512,Roon 的音频流传输带宽也远低于 100 Mbps,所以标准的千兆连接所提供的带宽已经远远够用。使用 SFP 或 10GbE 的服务器只会增加成本,对音质和功能都没有提升。

3. ROCK 无法保证能识别这类网卡。 ROCK 运行的是 Roon OS,这是一个封闭的专用系统,驱动是固定的——您无法自行安装额外的网卡驱动。像 Intel 82599 或 X710 这类 SFP+ 网卡并不在 Roon 支持/测试的硬件范围内,而且 ROCK 本身也仅在 Intel NUC 上受官方支持。因此,即便某块 SFP+ 网卡能被识别,那也只是运气,我们无法确认或提供支持。

建议: 选择任意一台兼容 ROCK 的 NUC(CPU 方面 i5-1240P 或 i7-12600H 级别都可以),使用其自带的千兆网口,RS130 仍然通过 SFP 接入您的交换机。这样您就能得到一套完全受支持、且没有任何缺点的方案。


Glad to hear everything's running smoothly now and HQPlayer connected without issue!

On the NUC question, the good news is you don’t need to hunt for one with an SFP port. Your server doesn’t need a matching SFP port to work with the RS130. A few things worth knowing:

1. You don’t need SFP on the server. The RS130’s SFP LAN port only needs to be on the same network as your Roon Server, not directly matched to it. Connect the NUC to your switch or router with its normal gigabit Ethernet, and connect the RS130 via SFP to that same switch. The switch bridges copper and fiber transparently, and the two devices talk to each other just fine.

2. There’s no audio benefit to 10GbE/SFP here. Roon audio streaming uses well under 100 Mbps even for DSD512, so a standard gigabit connection is far more bandwidth than the link will ever need. An SFP or 10GbE server adds cost with no sonic or functional gain.

3. ROCK can’t be relied on to recognize those cards. ROCK runs Roon OS, a locked-down appliance OS with a fixed driver set, you can’t install additional NIC drivers. SFP+ cards like the Intel 82599 or X710 aren’t part of Roon’s supported/tested hardware, and ROCK is only officially supported on Intel NUCs to begin with. So an add-in SFP+ card working would be luck, not something we can confirm or support.

Recommendation: Pick any ROCK-compatible NUC (an i5-1240P or i7-12600H-class machine is fine on the CPU side), use its built-in gigabit Ethernet, and keep running the RS130 on SFP into your switch. That gives you a fully supported setup with no downside.

好的,谢谢您。目前在国内使用比较多的是quboz和tidal,apple Music,QQ Music,spotify,roon目前只有quboz和tidal,对中文歌曲库不是特别完善,希望roon可以在dsp上增加房间校正和左右声道独立调整就更好了。并且我想购买终身roon,试过几次使用招商银行国际信用卡也无法支付成功,不知道能否开通微信或者支付宝支付?