Smart App Control is one of Windows 11’s built-in security features designed to protect your device from untrusted or potentially harmful applications. This guide explains what it does, its requirements, and how you can enable or disable it.
What is Smart App Control?
Smart App Control combines two powerful technologies:
- Microsoft’s app intelligence services – Predicts whether apps are safe.
- Windows code integrity features – Ensures only trusted, signed code runs.
What Does It Block?
By default, Smart App Control blocks:
- Malware
- Potentially Unwanted Apps (PUA)
- Unknown or unsigned code
If Microsoft’s app intelligence cannot predict safety, apps signed with a trusted Certificate Authority (CA) are still allowed.
Requirements
To use Smart App Control, you need:
- Windows 11, version 22572 or higher
- A clean install of Windows 11 (resetting your PC counts as a clean install)
- Availability in your region (gradually rolling out worldwide)
Note: If Smart App Control is turned off, it cannot be re-enabled without reinstalling or resetting Windows.
How to Enable or Disable Smart App Control
- Open Settings.
- Navigate to: Privacy & Security > Windows Security > App & Browser Control > Smart App Control Settings.
- Choose your preferred mode:
- On (Enforcement Mode): Actively protects your device. Only trusted apps run.
- Evaluation Mode: Runs silently in the background, observing app usage to determine suitability.
- Off: Smart App Control is disabled.
Smart App Control Stages
Evaluation Mode
- Observes your device activity.
- Decides if Smart App Control is a good fit based on the apps you use.
Enforcement Mode
- Actively blocks untrusted apps.
- Only apps recognized by Microsoft’s app intelligence or signed with a trusted certificate can run.
Re-Enabling Smart App Control
If Smart App Control has been turned off, you cannot simply switch it back on. To re-enable:
- Tap the Start button.
- Type Reset in the search box.
- Select Reset this PC from the results.
- From the Recovery menu, choose a reset option:
- Keep my files: Keeps personal files but removes apps and settings.
- Remove everything: Full reset.
This reinstalls Windows 11 with Smart App Control enabled. Alternatively, advanced users can modify the Registry Editor at:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy
Change the VerifiedAndReputablePolicyState DWORD (32-bit) value to 1.
With these steps, you can manage Smart App Control in Windows 11 to balance security and flexibility.
Smart App Control is a powerful safeguard for your system. Whether you choose to keep it in evaluation mode or enforce strict protection, it ensures your Windows 11 device stays secure against untrusted applications.