How to Enable or Disable Smart App Control in Windows 11: We’ve all done it. You download a “free” tool in a hurry, click through the installer, and a few minutes later your browser has a new homepage and your PC feels sluggish.
Windows 11 has a feature built to stop exactly that Smart App Control. It’s useful, but it’s also one of the most confusing settings in Windows. It has odd rules, it can block software you trust, and until recently it came with a catch that made many people think twice before touching it.
This guide covers what it does, how to check it, how to turn it on or off, and how to decide whether it belongs on your PC.
What is Smart App Control?
Smart App Control (SAC) is an app-protection feature in Windows Security. When you open a program, Windows checks it against Microsoft’s cloud intelligence and looks at whether it carries a valid digital signature. Trusted apps run normally. Unknown, unsigned, or suspicious ones get blocked before they can do anything.
It mainly targets three kinds of software:
- Outright malware
- Potentially unwanted apps (the kind that slow your PC, push ads, or sneak in extra installs)
- Untrusted programs with no track record
Most antivirus tools hunt for known bad files. SAC works the other way round, asking whether an app has earned trust. That makes it stricter, which is also why it can occasionally block something harmless.
The 2026 change you should know about
Here is the part most guides get wrong.
Smart App Control arrived with Windows 11 22H2, but with a frustrating rule: it only worked on a clean install. If you’d upgraded or set up your PC long ago, you had to reset Windows just to try it. On many builds, turning it off was also a one-way trip, and getting it back meant reinstalling again.
That limit was removed with the April 2026 security update for Windows 11 version 25H2. On an up-to-date PC, you can now switch Smart App Control on or off from Settings without reinstalling anything.
If a guide tells you “you must reinstall Windows to enable it,” it’s out of date. That said, if your PC is on an older build, the old rules may still apply to you, so run Windows Update first.
How to check your Smart App Control status
Before you change anything, see where it stands:
- Open the Start menu and search for Windows Security.
- Select App & browser control in the left sidebar.
- Find the Smart App Control section.
You’ll see one of three states:
- On: Windows is actively checking apps and blocking anything that fails its trust tests.
- Evaluation: Windows is watching how you use your PC to decide whether SAC would cause problems. If it looks like a good fit, it turns itself on. If not, it switches itself off.
- Off: The app-blocking protection is not running.
How to turn on Smart App Control in Windows 11
Method 1: Using Windows Security (easiest)
- Open Windows Security.
- Go to App & browser control.
- Click Smart App Control settings.
- Choose On.
That’s it. Check the status once more to confirm. If the option isn’t available, see the troubleshooting section below.
Method 2: Using the Registry Editor (advanced users)
This route is for people who are comfortable with Windows internals. Back up your registry before you start, because a wrong edit can cause real problems.
- Press Windows + R, type
regedit, and press Enter. Approve the admin prompt. - Go to this path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy - Double-click VerifiedAndReputablePolicyState.
- Enter 1 for On or 2 for Evaluation mode, then click OK.
- Restart your PC.
How to turn off Smart App Control in Windows 11
If SAC keeps blocking a program you trust, here is how to switch it off:
- Open Windows Security.
- Select App & browser control.
- Click Smart App Control settings.
- Choose Off.
- Confirm when Windows asks if you’re sure.
Once it’s off, Windows will no longer block apps based on SAC’s rules. You also lose the safety net that catches questionable software before it runs.
Registry warning: Some guides say you can set the same registry value to 0 to disable it. On a PC that hasn’t received the 2026 update, doing this can lock Smart App Control off until you reinstall Windows. If you aren’t sure which build you have, use the Windows Security toggle instead.
Can you turn it back on after disabling it?
On an up-to-date Windows 11 25H2 PC, yes. Just return to the same settings page and choose On.
On older builds, it may not be that simple. Windows might not offer the option at all, and the only fix would be resetting or reinstalling Windows. So if you rely on SAC’s protection, don’t switch it off casually. Update Windows first, then decide.
What to do when Smart App Control blocks a safe app
A block doesn’t mean the app is dangerous. It often means Microsoft simply doesn’t recognize it. Before you disable anything, run through these checks:
- Confirm the source. Did you download it from the developer’s official website?
- Look for a newer version. Updated releases are often properly signed.
- Install pending Windows updates. Reputation data and the feature itself keep improving.
- Scan the file with Windows Security.
- Contact the developer if the problem keeps happening. Unsigned software is a fixable issue on their end.
One thing to know: Smart App Control has no “allow this app” button. You can’t whitelist a single program. The choice is binary, either SAC stays on and the app stays blocked, or you turn SAC off. So run the checks above and only then decide.
Smart App Control vs. Microsoft Defender SmartScreen
People mix these up constantly, and they overlap, but they do different jobs.
- SmartScreen warns you about dangerous websites, risky downloads, and suspicious apps, usually with a warning you can choose to override.
- Smart App Control decides whether an app is allowed to run at all, and it’s much less forgiving.
Think of SmartScreen as a friend saying “I wouldn’t click that,” and Smart App Control as a bouncer who doesn’t let the app through the door.
Does Smart App Control replace antivirus?
No. It’s an extra layer, not a substitute. Microsoft Defender Antivirus, or whatever security software you use, is still the part that scans for and removes malware. Keep both working together, and keep Windows updated.
Why can’t I find Smart App Control?
If the setting is missing or greyed out, one of these is probably the reason:
- Your Windows 11 version is too old and doesn’t include it (it isn’t available on Windows 10 at all).
- Windows needs updating, especially if you want the new no-reinstall behavior.
- Your PC doesn’t meet the conditions to run it, or Evaluation mode decided it wasn’t a good fit.
- It was switched off earlier on an older build and is now locked.
- Your device is managed by a school or employer, and an administrator controls the setting.
Check your Windows version and run Windows Update first. If it’s a work or school PC, speak to your IT team before trying to force the setting, and don’t edit system files or security policies to get around it.
Also Read: Control and Privacy Does Linux Beat Windows 11?
Should you keep Smart App Control on?
It depends on how you use your PC.
Keep it on if:
- You mostly use mainstream apps and the Microsoft Store.
- Other people share your PC, such as family members or kids.
- You want protection without thinking about it.
Consider turning it off if:
- You’re a developer or tinkerer who regularly runs unsigned tools and custom builds.
- You use niche software that’s repeatedly blocked and has no signed alternative.
- You’re careful about downloads and already run solid security software.
For most people, leaving it on is the safer choice as long as it isn’t getting in your way. If you do turn it off, be pickier about where your software comes from.
How do I enable Smart App Control in Windows 11?
Open Windows Security, go to App & browser control, click Smart App Control settings, and choose On. If the option is missing, update Windows or check whether your device is managed.
How do I disable Smart App Control?
Follow the same path and choose Off, then confirm the prompt.
Can I turn it back on after disabling it?
On an up-to-date Windows 11 25H2 PC, yes. On older builds, you may need to reset or reinstall Windows.
Why is Smart App Control blocking my app?
Windows probably can’t verify the app, either because it’s unsigned or because Microsoft has little reputation data for it.
Can I allow just one app?
No. There is no per-app exception, so the only way to run a blocked program is to turn SAC off.
Is Smart App Control the same as Windows Defender?
No. Smart App Control controls which apps may run, while Microsoft Defender Antivirus scans for and removes malware.
Is it safe to disable?
It removes one layer of protection, so it’s fine for careful users with a good reason, but not something to do just because a prompt annoyed you.
Conclusion
Smart App Control went from a feature you had to commit to, sometimes with a full Windows reinstall, to something you can try and undo in a few clicks. If you’ve never used it, give it a week. If it blocks something you need, you now know how to deal with it safely.
Also Read: