Did Microsoft mess up my Security? Strange story!

Running Windows 11 22621.607 Release Preview.

I've made a couple of posts here recently regarding issues with the Security app, here's what I've discovered/done to resolve:

Clean install of Windows 11 22621 in June - C:\Windows\System32\SecurityHealth folder is empty. Smart App control (new feature for 22H2) is available in Security settings/App and Browser control. Everything is working.

Platform update to 4.18.2207.7 - all seems ok but can't remember exactly.

Last week Windows Update installed a security update. Two folders in SecurityHealth - 1.0.2207.20002-0 and 1.0.2208.(something). I noticed then that the Smart App control setting was gone completely.

ANOTHER update installed on Friday Sept 23rd - this time creating another folder 1.0.2209. App and Browser control still not working, but also the Security app would keep crashing and showed UNKNOWN for the status. The little green taskbar icon would never change from a tick to a red X, even if I disabled realtime protection. Very strange.

Booted into Recovery and deleted all the folders in SecurityHealth. PC restarted, Smart App control is back - for about a minute when the 1.0.2209 folder reappeared (without me checking for updates). Security app starts crashing again.

Turned off ALL protections, and did MpCmdRun.exe -resetplatform.

Rebooted into recovery, deleted the folders in SecurityHealth again.

Restarted PC, checked for updates. Platform update 4.18.2207-7 re-installed, nothing appeared in the SecurityHealth folder.
Smart App control working, and the Security UI no longer crashes. The tick turns red if I disabled anything. Rebooted a few times, nothing has appeared in the folder. Definition updates are installing with no problems.

Another PC in the house has the 'extra' folders in SecurityHealth, Smart App control isn't working on there either but the Security UI doesn't crash.
I noticed that the 1.0.2209 folders both appeared on the same day.

I'm wondering - did MS send an update which caused problems? It seems to have settled now. My About box is shown in the pic.
Windows Security Application Version: 1000.25183.0.1000 appears to me to be a Dev channel version? Which would be totally wrong for RP channel!

My Beta VM doesn't show this line at all in the About box, everything works on there.

Totally at a loss what happened here!

UPDATE: Windows Update just successfully installed Platform update 1.2209.22001-0. Smart App control is gone again, and the Security app is crashing again. I've now reset the platform again, and deleted the folder. I've also blocked this update from installing for a third time (hopefully).

If you got to start and search on "smart app control" you get to the settings page for that. On all 3 of my PCs it's disabled. The wife's PC, which did do a clean install a couple of months ago, did show for a while as being in evaluation mode but now that's off too.

I suspect that if your PC can't meet the requirements, and is hence this control is disabled, the screen no longer displays in "app and browser control".

RFS said:

If you got to start and search on "smart app control" you get to the settings page for that. On all 3 of my PCs it's disabled. The wife's PC, which did do a clean install a couple of months ago, did show for a while as being in evaluation mode but now that's off too.

I suspect that if your PC can't meet the requirements, and is hence this control is disabled, the screen no longer displays in "app and browser control".

Click to expand...

It was working until the security update I mentioned, I've also made another thread just now. Smart App control is currently available in the settings (it's in Evaluation mode, but it's there). The problem is that KB5007651 is installing when it shouldn't be, and that's corrupting the Security app.

BrianInEngland said:

UPDATE: Windows Update just successfully installed Platform update 1.2209.22001-0. Smart App control is gone again, and the Security app is crashing again.

Click to expand...

+1 : SecurityHealthService.exe crashes often and Smart app control is vanished.

22621.521
Platform update 1.2209.22001-0 (Sept 23rd) + extra folders (more ancient)
HVCi/TPM on

3L11 said:

+1 : SecurityHealthService.exe crashes often and Smart app control is vanished.

22621.521
Platform update 1.2209.22001-0 (Sept 23rd) + extra folders (more ancient)
HVCi/TPM on

Click to expand...

I'll send feedback and share the link here. For now I've used wushowhide to stop the update from downloading.

Feedback link: Windows Insider

BrianInEngland said:

Feedback link: Windows Insider

Click to expand...

good job!

3L11 said:

good job!

Click to expand...

@3L11 Just an update: I did a repair install using Windows 11 ISO, the problem is still there.
Then I restored from an image backup. Restarted, entered the BIOS settings. I DISABLED the TPM in BIOS, now the Security never crashes, but Smart App control is still gone.
With TPM enabled this screen is completely blank, I think the security update is incompatible with the TPM. Give that a try and see if it makes a difference.

txs for the tip and sorry for my poor english (it's not my native language and, moreover, i didn't study it well when i had to ), anyway:
the important thing is that others find it too, a sign that we are facing a bug that has some diffusion and is not specific to the single PC.
Therefore, following this logic, going to relax certain parameters is not the solution that is instead in the hands of Microsoft as long as they become aware of it.

I make a Post in Microsoft Feedback Hub, but there are not so many Users that have this Issue. I don´t think its a Major Problem but for me it´s more than enough.

Yosh79 said:

I make a Post in Microsoft Feedback Hub, but there are not so many Users that have this Issue. I don´t think its a Major Problem but for me it´s more than enough.

Click to expand...

I think it's quite a widespread problem but not many are aware of it - how many users ever actually check their security settings? They usually set it up on first use, then forget about it. If the green tick is showing there's no need to look at anything so won't see the Security crashing problem.

Smart App control is missing on three PCs I've seen, only mine had the TPM so was having app crashes. Since disabling TPM the app no longer crashes. We just have to hope for a MS fix

Do you have Feedback link so I can upvote?

Disabling TPM works but than you don´t receive Updates anymore.
Smart App Control is only there when i search for it in the Settings. None of the three Possibilitys is checked-

Yosh79 said:

Disabling TPM works but than you don´t receive Updates anymore.
Smart App Control is only there when i search for it in the Settings. None of the three Possibilitys is checked-

Click to expand...

You still get Cumulative updates and Defender definitions. Yes Smart App control is completely broken with this Security update

Quick update: I today borrowed a Windows 11 tablet, it has a working TPM.
Opened the Security app a few times, after a while it crashed, showing status Unknown, just like mine did with the TPM active.
Checked C:\windows\system32\securityhealth and sure enough there's a folder 1.0.2209.22001-0 in there. Oh and Smart app control is broken too.

So definitely not an issue specific to my PC/TPM

Dell Vostro 3400 Win11 Pro RTM. Opened and closed Windows Security half-dozen times, no issue. Have not been offered 22H2 yet.

Yosh79 said:

Disabling TPM works but than you don´t receive Updates anymore.
Smart App Control is only there when i search for it in the Settings. None of the three Possibilitys is checked-

Click to expand...

wait what you mean you dont get updates?

In this guide, i will show how to fix typical issues if you cannot open the Windows Security in Windows 10 and Windows 11.

Berton said:

Dell Vostro 3400 Win11 Pro RTM. Opened and closed Windows Security half-dozen times, no issue. Have not been offered 22H2 yet.

View attachment 41312


View attachment 41313

Click to expand...

All the issues seem to be on 22H2 machines. Smart App control is broken with the latest Antimalware platform update, which isn't a 21H2 feature.
Do you have anything in the folder c:\windows\system32\securityhealth ?

Sorry, just noticed your first post shows an Insider Preview edition, I'm on an RTM. My newest Desktop from April, no issue with 6 open and close:

Berton said:

Sorry, just noticed your first post shows an Insider Preview edition, I'm on an RTM. My newest Desktop from April, no issue with 6 open and close:

View attachment 41339

Click to expand...

Is the TPM active?

BrianInEngland said:

Is the TPM active?

Click to expand...

Yes. Also in messing around just got prompted for a new Build update, KB5017389.