How to enable Smart App Control protection on Windows 11

• Smart App Control (SAC) blocks untrusted and malicious apps using certificates and cloud intelligence.
• Previously required a clean install, but Windows 11 25H2 (April 2026 update) removes that limitation.
• You can enable the feature from Windows Security > App & browser control > Smart App Control.

On Windows 11, you can enable Smart App Control (SAC) to protect your computer from malicious and unwanted apps, and in this guide, I’ll explain how to configure this feature.

Smart App Control (SAC) is a security feature in the Windows Security app that locks the system down, allowing it to run only trusted apps or apps with valid certificates, preventing unwanted behavior from untrusted applications.

Smart App Control has been available since Windows 11 22H2, but starting with the April 2026 Security Update for version 25H2, you can enable or disable it without reinstalling the operating system. Previously, the feature required a clean installation to work. It’s also not available on older releases, including Windows 10.

In this guide, I will outline the steps to configure the Smart App Control security feature on Windows 11. You can further enhance Windows 11 security by adjusting these key settings.

Enable Smart App Control on Windows 11

To enable Smart App Control on Windows 11, follow these steps:

1. Open Windows Security.

2. Click on App & browse control.

3. Click on Smart App Control settings.

   

4. Select the On option.

   

After you complete the steps, the feature will turn on to monitor and prevent malicious or untrusted apps from running on your device.

Since this feature can now be managed without reinstallation, on new setups or after a clean installation, it will automatically enter “Evaluation” mode to learn from your applications and determine whether it can run without affecting the experience. However, you can always turn on the feature manually.

It’s important to note that if you turn this feature on, Smart App Control may block one or more trusted apps at some point. You won’t be able to access them until you disable the feature, since it doesn’t include a setting to unblock apps.