On Windows 11, you enable Smart App Control (SAC) to protect your computer from malicious and unwanted apps, and in this guide, I’ll explain the steps to configure this feature.
What’s Smart App Control?
Smart App Control (SAC) is a security feature available from the Windows Security app that locks the system down, allowing it to run only trusted apps or apps with valid certificates to prevent unwanted behaviors from untrusted applications.
This feature is available on Windows 11 22H2, 23H2, 24H2, and higher releases. SAC isn’t available for older versions of the operating system, including Windows 10.
How does Smart App Control work?
SAC is primarily available on devices with a clean installation of Windows 11. Upon installation, Smart App Control operates in “Evaluation” mode, monitoring application usage to determine its impact on your experience. If SAC determines it can function without causing disruptions, it automatically transitions to active mode. Otherwise, it remains disabled.
Can I disable Smart App Control?
Once the evaluation is complete, the feature will enable automatically, but you won’t be able to turn it off. Also, if the system blocks an app, you won’t be able to unblock it unless you turn off the feature, which will require complete reinstallation of the operating system.
To disable Smart App Control, you can perform a clean installation or reset the system with the option to keep your files.
In this guide, I will outline the steps to configure the Smart App Control security feature on Windows 11. You can further enhance Windows 11 security by adjusting these key settings.
Enable Smart App Control on Windows 11
To enable Smart App Control on Windows 11, use these steps:
-
Open Windows Security.
-
Click on App & browse control.
-
Click on Smart App Control settings.
-
Select the Evaluation option.
Quick note: If the option is “Off,” it’s likely because you don’t have a device with a clean installation or the evaluation mode determined that the device cannot run the feature.
After you complete the steps, the feature will run quietly in the background but won’t block anything. However, in this stage, the system will learn from your applications to determine whether the feature can run without affecting the experience.
If Smart App Control can run as expected, the system will turn it on automatically. If the feature gets in the way, the system will turn it off automatically.
It’s important to note that if you turn this feature on, there’s a chance that, at some point, Smart App Control may block one or more trusted apps. You won’t be able to access them until you disable the feature since it doesn’t include a setting to unblock apps.
Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech (est. 2010). With over 21 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS.
Certifications: Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+.
Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central.
You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at [email protected].