Smart App Control


Tasmania Green

Well-known member
Member
Local time
6:43 AM
Posts
556
OS
Windows 11 Pro - version 24H2
Today I looked on my computer but couldn't find the maintenance batch script that antspants created as a zip file on Oct 14, 2025. (see the General Support forum / System Maintenance thread.) So, I downloaded it. But Windows wouldn't let me run the batch file because it said that such programs could cause problems. So I turned off Smart App Control. Now I can periodically run the batch file for system maintenance.

I would like to turn Smart App Control back on. But Windows won't let me do that without reinstalling Windows 11.

Should Smart App Control be turned on? And if so, what is the best way to reinstall Windows 11 without having to erase my solid state drive and having to reinstall everything?
 

My Computer

System One

  • OS
    Windows 11 Pro - version 24H2
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 7600X 6 Core AM5 5.3GHz CPU
    Motherboard
    2024 MSI MAG B650 GAMING PLUS WIFI
    Memory
    Silicon Power XPOWER Zenith 32GB (16GBx2) CL30,1.35V UDIMM 6000MHz DDR5 RAM
    Graphics Card(s)
    MSI GeForce RTX 4060 Ventus 2X Black 8G OC Graphics Card
    Monitor(s) Displays
    Asus ROG Strix XG32WCS - 32in HDR VA 180Hz USB Type-C FreeSync Curved Gaming Monitor
    Screen Resolution
    2560 x 1440
    Hard Drives
    1) Silicon Power 1TB P34A60 Gen3x4 TLC R/W up to 2,200/1,600 MB/s PCIe M.2 NVMe SSD

    2) Crucial 1TB E100 CT1000E100SSD8 Gen4 M.2 NVMe SSD
    PSU
    MSI 750W MAG A750GL 80+ Gold PCIe 5 ATX 3.0 Modular Power Supply
    Case
    SilverStone Fara R1 Pro V2 Tempered Glass ATX Case - Black
    Cooling
    Thermalright Peerless Assassin 120 SE ARGB Dual Loop CPU Cooler, 120mm Fan
    Antivirus
    Microsoft Defender
Today I looked on my computer but couldn't find the maintenance batch script that antspants created as a zip file on Oct 14, 2025. (see the General Support forum / System Maintenance thread.) So, I downloaded it. But Windows wouldn't let me run the batch file because it said that such programs could cause problems. So I turned off Smart App Control. Now I can periodically run the batch file for system maintenance.

I would like to turn Smart App Control back on. But Windows won't let me do that without reinstalling Windows 11.

Should Smart App Control be turned on? And if so, what is the best way to reinstall Windows 11 without having to erase my solid state drive and having to reinstall everything?

open the Windows registry to this key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy

in the right had window double click
VerifiedAndReputablePolicyState
change the value from 0 to 1
then click OK and close the Windows registry.

1765800612842.webp

a restart of your computer will be required to change
Smart App Control to ON

best of luck Steve ..
 

My Computers

System One System Two

  • OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software
  • Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
You could also wait a bit. There is a change coming that will let you toggle it on and off without reinstallation.

 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender
You could also wait a bit. There is a change coming that will let you toggle it on and off without reinstallation.


Thanks. I'll wait. Any thoughts on when the final version might be released? The article says the preview build was release on 7 November. No rush. Just curious as I've never participated in a beta program.
 

My Computer

System One

  • OS
    Windows 11 Pro - version 24H2
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 7600X 6 Core AM5 5.3GHz CPU
    Motherboard
    2024 MSI MAG B650 GAMING PLUS WIFI
    Memory
    Silicon Power XPOWER Zenith 32GB (16GBx2) CL30,1.35V UDIMM 6000MHz DDR5 RAM
    Graphics Card(s)
    MSI GeForce RTX 4060 Ventus 2X Black 8G OC Graphics Card
    Monitor(s) Displays
    Asus ROG Strix XG32WCS - 32in HDR VA 180Hz USB Type-C FreeSync Curved Gaming Monitor
    Screen Resolution
    2560 x 1440
    Hard Drives
    1) Silicon Power 1TB P34A60 Gen3x4 TLC R/W up to 2,200/1,600 MB/s PCIe M.2 NVMe SSD

    2) Crucial 1TB E100 CT1000E100SSD8 Gen4 M.2 NVMe SSD
    PSU
    MSI 750W MAG A750GL 80+ Gold PCIe 5 ATX 3.0 Modular Power Supply
    Case
    SilverStone Fara R1 Pro V2 Tempered Glass ATX Case - Black
    Cooling
    Thermalright Peerless Assassin 120 SE ARGB Dual Loop CPU Cooler, 120mm Fan
    Antivirus
    Microsoft Defender
You could watch the Windows Roadmap. Just search for the word “smart” and it should narrow the list pretty well.

 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender
Still doesn't work on Windows 11. Had to boot into safe mode to reset the CI PolicyState entry back to 0.

Smart App Control bricks Windows by blocking essential bootup services from running that should be automatically whitelisted.

A bug Microsoft has never gotten around to fixing. You've been duly warned. Turn it on at your own risk.
 

My Computers

System One System Two

  • OS
    Windows 11 Education For 25H2
    Computer type
    Laptop
    Manufacturer/Model
    HP ZBook G2
    CPU
    Intel® Core i7 5500u
    Motherboard
    HP
    Memory
    8 GB
    Graphics Card(s)
    Intel HD Family Graphics 5500 AMD Firepro 4150M
    Sound Card
    Realtek High Audio
    Hard Drives
    1 TB SSD
    Mouse
    HP USB Mouse
    Antivirus
    Windows Defender
  • Operating System
    Windows 11 Pro For Workstations 25H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Zbook G4
    CPU
    Xeon 1535m v6
    Motherboard
    HP
    Memory
    32 GB
    Graphics card(s)
    AMD Quadro Pro 4100
    Sound Card
    Bang and Olufson Audio
    Hard Drives
    1TB SSD
    Mouse
    HP USB Mouse
    Antivirus
    Windows Defender
Don’t install unsigned service executables. Done and dusted.
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender
But Windows wouldn't let me run the batch file because it said that such programs could cause problems. So I turned off Smart App Control.

If a batch is blocked but you trust it: Right Click > Properties > Unblock

No need for anything else.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2 Build 26200.8655
    Computer type
    PC/Desktop
    Manufacturer/Model
    Sin-built 2013
    CPU
    Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
    Motherboard
    ASUS ROG Maximus VI Formula
    Memory
    32.0 GB of I forget and the box is in storage.
    Graphics Card(s)
    Gigabyte nVidia GeForce GTX 1660 Super OC 6GB
    Sound Card
    Onboard thingy
    Monitor(s) Displays
    5 x LG 25MS500-B - 1 x 24MK430H-B - 1 x Wacom Pro 22" Touch Screen Tablet
    Screen Resolution
    All over the place
    Hard Drives
    Too many to list.
    OS on Samsung 1TB 870 QVO SATA
    PSU
    Silverstone 1500
    Case
    NZXT Phantom 820 Full-Tower Case
    Cooling
    Noctua NH-D15 Elite Class Dual Tower CPU Cooler / 6 x EziDIY 120mm / 2 x Corsair 140mm somethings / 1 x 140mm Thermaltake something / 2 x 200mm Corsair.
    Keyboard
    Corsair K95 / Logitech diNovo Edge Wireless
    Mouse
    Logitech: G402 / G502 / Mx Masters / Mx Air Cordless
    Internet Speed
    2000/500Mbps
    Browser
    All sorts
    Antivirus
    Kaspersky Premium
    Other Info
    ㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
    TP-Link BE9300 WiFi 7 Bluetooth 5.4 (Archer TBE550E)
    TP-Link TX201 V1 2.5GB Lan

    Grandstream HT812 - VoIP
    ASUS DSL-AX82U - Mesh
    ASUS RT-AC68U - Mesh
    ASUS RT-BE88U Router

    Brother MFC-L2880DW Printer

    I’m on a horse.
  • Operating System
    Windows 11 Pro 25H2 Build 26200.8655
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO Yoga 7 14IRL8 - 7i EVO OLED 14" Touchscreen i5 12 Core 16GB/512GB
    CPU
    Intel Core 12th Gen i5-1240P Processor (1.7 - 4.4GHz)
    Memory
    16GB LPDDR5 RAM
    Graphics card(s)
    Intel Iris Xe Graphics Processor
    Sound Card
    Optimized with Dolby Atmos®
    Screen Resolution
    QHD 2880 x 1800 OLED
    Hard Drives
    M.2 512GB
    Antivirus
    Defender / Malwarebytes
    Other Info
    …still on a horse.
:shawn:

Starting with Windows 11 build 26220.7070 (Dev and Beta), Microsoft is updating Smart App Control (SAC) so you will now be able to switch SAC off or on without any clean install requirement. When it’s on, it helps block untrusted or potentially harmful apps.

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
With Smart App Control on my mini PC, it would not mount a Windows 11 25H2 iso directly download from Microsoft. If it doesn't trust apps directly from Microsoft, there is a serious problem with it.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Geekom AX7 Pro
    CPU
    AMD Ryzen 9 7940HS
    Memory
    32 GB
    Graphics Card(s)
    Radeon 780M Graphics
    Monitor(s) Displays
    Dell S2425H 24"
    Screen Resolution
    1920 x 1080
    Hard Drives
    2 TB NVMe SSD
    Internet Speed
    100 Mbs
    Browser
    Microsoft Edge / Firefox
    Antivirus
    F-Secure Security Suite
  • Operating System
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3910
    CPU
    12th Gen Intel Core i7-12700 processor (12-Core, 25M Cache, 2.1GHz to 4.8GHz)
    Motherboard
    Dell 0KHP4K
    Memory
    16 GB
    Graphics card(s)
    Intel(R) UHD Graphics 770 with shared graphics memory
    Monitor(s) Displays
    Dell 27" Monitor S2721DS,
    Screen Resolution
    QHD 2560 x 1440 @ 75 Hz
    Hard Drives
    1TB M.2, PCIe NVMe, SSD
    Internet Speed
    100 Mbps
    Browser
    Edge
    Antivirus
    F-Secure Security Suite
Back
Top Bottom