How to Disable Smart App Control in Windows 11

5 mins read

Updated on 2026-09-04 18:54:21 to Windows Fix

Windows 11’s Smart App Control can block older or unsigned programs you actually trust, triggering “This app might harm your device” warnings or silent blocks. If you need to run a specific tool, mod, or legacy app and you’re sure it’s safe, turning off Smart App Control removes that layer of enforcement. Below is a step-by-step guide to disable Smart App Control in Windows 11, plus what to watch out for before you switch it off.

1. What Is Smart App Control & What Does Smart App Control Do?

Smart App Control (SAC) is a Windows 11–exclusive security feature that acts as a gatekeeper for applications, deciding whether a program is allowed to run before it ever reaches your desktop. Instead of waiting for malware to behave badly, SAC checks each executable against Microsoft’s cloud-powered app intelligence and code-signing rules, then either allows it, blocks it, or (in Evaluation mode) just logs what would have been blocked.

2. Should I Turn Off Smart App Control?

Whether you should turn off Smart App Control (SAC) depends on how you use your PC, what kinds of apps you run, and how comfortable you are managing security risks. Consider turning it off when all of the following are true:

  • You obtained the installer directly from the verified developer or a trusted organization, checked its publisher and digital signature, and scanned it with current security software.
  • The developer confirms a known compatibility issue, or the installation uses an MST file that Smart App Control cannot currently validate in the normal way.
  • There is no updated signed build, Microsoft Store version, or supported deployment method that avoids disabling protection.
  • You understand that Smart App Control does not offer an allow-list exception for one specific app. Microsoft recommends contacting the developer and requesting a properly signed release.

3. How to Turn Off Smart App Control in Windows 11?

Use the Windows Security method first. It is the supported consumer route and exposes only the states permitted by the current system. The registry route is intended for controlled testing and administration, not as a casual workaround for blocked downloads.

Method 1: Disable Smart App Control in Windows Security

  • Press Windows + I to open Settings, then select Privacy & security.

  • Select Windows Security, then choose Open Windows Security.

  • In the Windows Security app, select App & browser control.

  • Under Smart App Control, select Smart App Control settings.

    smart app control settings
  • Choose Off and approve the confirmation prompt. Restart the blocked installer only after you have verified its source and signature.

    disable smart control settings

If the controls are unavailable, install pending Windows and Defender updates and restart. A managed work or school device may enforce security policy, in which case contact the administrator.

Method 2: Disable Smart App Control with Registry Configuration

If the Smart App Control toggle is missing, grayed out, or stuck in Evaluation mode, you can try disabling it directly through the Windows Registry. This method gives you manual control over the SAC policy state, but it should only be used if you’re comfortable editing registry keys and understand the risks.

  • Press Win + R, type regedit, and press Enter. Click Yes if prompted by UAC.

  • Navigate to this key: textHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy

  • In the right pane, look for the DWORD value named VerifiedAndReputablePolicyState.

    locate policy state dword
  • If it does not exist, right-click in the empty area > New > DWORD (32-bit) Value, name it VerifiedAndReputablePolicyState.

  • Double-click VerifiedAndReputablePolicyState and set its value to 0:

    • 0: Off (Disabled)
    • 1: Evaluation mode
    • 2: Enforcement mode (On)
  • Click OK, close Registry Editor, and restart your computer.

⚡ Bonus Tip: Back Up Your System before Making Major Changes

Before you disable Smart App Control or make any other major system changes, it’s a good idea to back up your current setup. If something goes wrong, whether it’s a failed update, a problematic app, or an accidental misconfiguration, a recent backup lets you restore your system quickly without losing data or reinstalling everything from scratch.

With 4DDiG Partition Manager, you can back up your Windows installation, applications, and personal files in one go. Below are the steps to back up system:

  • Connect an external drive to your PC after downloading and installing 4DDiG Partition Manager. Open the program and choose “Clone OS Disk”.

    FREE DOWNLOAD

    Secure Download

    clone os disk
  • Select the destination disk that will receive the cloned data from the source disk, then click Next. (The source disk is your system drive; the target disk is the external drive you just connected.)

    select the source and target task
  • A preview screen will appear showing how the cloned disk will look. By default, the partitions from the source disk will fill the entire target disk. You can drag the handles on either side to adjust the size of the cloned partitions if needed. Once the preview looks correct, click Start to begin the cloning process.

    adjust partition
  • Keep in mind that cloning will erase all existing data on the target disk. After double-checking that everything is set up correctly, click Sure to confirm.

    click sure
  • Wait for the cloning process to finish. The time required depends on the size of the source disk. Do not interrupt the operation or perform other tasks on the computer while it is running.

    finish cloning

Once complete, the data from the source disk will have been successfully cloned to the target disk. A clone is a point-in-time safeguard. Continue keeping irreplaceable files in a separate, versioned backup location.

More FAQs About Smart App Control

1. How can I bypass Smart App Control in Windows 11 for one app?

You can’t create a one-time “bypass” for Smart App Control on a per-app basis. To run a specific app that SAC is blocking, you need to either turn Smart App Control off entirely in Windows Security

2. Is Smart App Control necessary?

For most home users, keeping it enabled is the safer default. Antivirus and SmartScreen remain important even when Smart App Control is off.

3. How do I turn on Smart App Control?

Open Windows Security > App & browser control > Smart App Control settings and select On if available. Recent updates support re-enabling it on eligible devices, while some configurations may still require a reset or reinstall.

4. When did Windows Smart App Control come out?

Microsoft introduced Smart App Control with Windows 11 version 22H2. It is not available in Windows 10.

Conclusion

The safest way to turn off Smart App Control in Windows 11 is through Windows Security, and only after confirming that a legitimate, current, signed installer is unavailable. Smart App Control adds system-wide protection and does not support a one-app exception, so disabling it merely to run an unknown file is not recommended.

Before registry testing or other major system changes, clone the system disk with a tool such as 4DDiG Partition Manager and keep a separate backup of essential files. Use Microsoft’s current instructions, keep Windows updated, and restore protection as soon as your eligible device permits it.

FREE DOWNLOAD

Secure Download

Sawart Mashab (senior editor)

Sawart Mashab, the content writer for 4DDiG, is adept at creating informative and practical solutions related to Windows and macOS issues, data recovery, file repair, and RAID storage.

(Click to rate this post)

You rated 4.5 ( participated)