Smart App Control is one of Microsoft’s security features designed to protect Windows 11 users from malicious or untrusted applications. It uses cloud-based AI and Microsoft’s code-signing database to block potentially harmful apps before they can run. However, depending on your workflow, Smart App Control can sometimes be too restrictive, preventing certain safe apps or installers from working correctly.
If you’re running into such issues or want to take full control of what runs on your PC, here’s a complete guide on how to enable or disable Smart App Control in Windows 11 — including how it works, what happens when you turn it off, and how to re-enable it later.
What Is Smart App Control in Windows 11?
Smart App Control (SAC) is a built-in Windows 11 feature that helps prevent untrusted or unsigned apps from running on your PC.
It works by:
- Checking the digital signature and reputation of apps before allowing them to run.
- Using Microsoft Defender SmartScreen and AI models to identify unsafe software.
- Blocking potentially harmful apps, scripts, and installers in real time.
Essentially, it’s like a stricter version of SmartScreen — focusing on zero-trust protection.
However: Once Smart App Control is turned off, you cannot turn it back on unless you reinstall or reset Windows 11. So, make sure you understand the implications before disabling it.
Step 1: Check if Smart App Control Is Available on Your PC
Smart App Control is only available on Windows 11 version 22H2 or later and requires Windows Security with core integrity enabled.
To check:
- Press Windows + I to open Settings.
- Navigate to Privacy & security → Windows Security → App & browser control.
- Under Smart App Control, click Smart App Control settings.
If you see this section, your system supports Smart App Control. If it’s missing, you may be running an older Windows 11 version or a non-standard build.
Step 2: Understand the Smart App Control Modes
Smart App Control has three modes:
- On: Fully active — blocks untrusted apps and files.
- Evaluate: Observes app behavior to determine if Smart App Control is suitable for you (used after resetting Windows).
- Off: Disabled completely — allows all apps to run without checks.
When you first install or reset Windows 11, Smart App Control starts in Evaluate mode. Based on your app usage, it either turns itself On (if you install only trusted software) or Off (if you frequently run unsigned or custom apps).
Step 3: How to Enable Smart App Control in Windows 11
If Smart App Control is currently off, and you want to enable it for extra protection, follow these steps:
Note: You can only enable Smart App Control after reinstalling or resetting Windows 11 if it has been turned off previously.
- Press Windows + I to open Settings.
- Navigate to Privacy & security → Windows Security → App & browser control.
- Click Smart App Control settings.
- Choose On or Evaluate (if available).
Once enabled, Windows will automatically begin verifying applications before they’re installed or executed.
Step 4: How to Disable Smart App Control in Windows 11
If Smart App Control is blocking trusted programs or interfering with your workflow, you can turn it off:
- Press Windows + I to open Settings.
- Go to Privacy & security → Windows Security → App & browser control.
- Under Smart App Control, click Smart App Control settings.
- Select Off.
Windows will warn you that once Smart App Control is disabled, it cannot be re-enabled without a reset. Confirm your choice.
Tip: If you just want fewer restrictions without turning it off completely, use App & browser control → Reputation-based protection to fine-tune app checks instead.
Step 5: Re-enable Smart App Control (If You’ve Turned It Off Before)
Once you turn off Smart App Control, there’s no toggle to turn it back on — but you can still restore it by resetting your PC.
- Press Windows + I → System → Recovery.
- Under Recovery options, click Reset this PC.
- Choose Keep my files (to keep your personal data).
- After the reset, Smart App Control will enter Evaluate mode again.
- Once it completes its evaluation, you can manually set it to On.
Step 6: Temporarily Bypass Smart App Control
If you want to install a specific app that Smart App Control keeps blocking, but you don’t want to disable it entirely:
- Right-click the blocked file → Properties.
- In the General tab, look for Unblock at the bottom.
- Check Unblock and click Apply → OK.
- Run the file again.
Alternatively, try running the app as Administrator — sometimes this allows trusted apps to bypass SAC.
Step 7: Use SmartScreen as an Alternative
If you disable Smart App Control but still want protection, rely on Windows SmartScreen — a more flexible security feature that warns you about unverified downloads or websites.
To ensure it’s turned on:
- Open Windows Security → App & browser control.
- Under Reputation-based protection, click Reputation-based protection settings.
- Make sure these are enabled:
- Check apps and files
- SmartScreen for Microsoft Edge
- Potentially unwanted app blocking
This way, you’ll still get security warnings without the full restrictions of Smart App Control.
Step 8: Check Smart App Control Status via PowerShell (Optional)
If you’re managing multiple systems or just want to confirm SAC’s state programmatically:
- Press Windows + X → Windows Terminal (Admin).
- Run this command:
Get-WindowsOptionalFeature -Online -FeatureName Windows-Defender-ApplicationGuard - Look for the
Statevalue — it will show Enabled or Disabled.
Wrapping Up
Smart App Control in Windows 11 is a robust security feature that helps keep malware, untrusted scripts, and unsigned apps off your system. For most users, keeping it enabled offers an extra layer of protection without noticeable performance impact.
However, if you often use custom software or development tools, you may find it too restrictive — in which case, you can safely turn it off or rely on SmartScreen instead.
Once disabled, you’ll need to reset your PC to re-enable it, so make that choice carefully.
With these steps, you now know exactly how to enable or disable Smart App Control in Windows 11 — striking the perfect balance between security and flexibility on your system.