Smart App Control is a Windows security feature that blocks apps it considers untrustworthy. It sounds helpful, but it can also block software you actually need, like unsigned tools, developer utilities, or apps from small publishers. If it keeps blocking your programs, you need to know how to turn off Smart App Control safely and quickly.
Here is the short answer: go to Windows Security > App and Browser Control > Smart App Control settings, then set it to Off. But there is a catch, and this guide explains everything you need to know before you flip that switch.
What Is Smart App Control?
Smart App Control (SAC) is a Windows 11 security feature introduced with Windows 11 22H2. It works by checking every app you try to run against Microsoft’s cloud-based AI model and a list of known trusted publishers.
If an app has a valid code signature and a good reputation, it runs fine. If it does not, SAC either blocks it or asks you to confirm. This happens silently and without any detailed error message, which is why many users find it frustrating.
SAC has three states:
| State | What It Does |
|---|---|
| On | Actively blocks apps it does not trust |
| Evaluation | Monitors quietly, learning your usage before deciding to stay On or turn Off |
| Off | Completely disabled, no more blocking |
Once you turn SAC off, you cannot turn it back on without reinstalling Windows or doing a full reset. This is not a bug. It is a design choice by Microsoft. They do not want users toggling it on and off repeatedly, as that would defeat its purpose.
Why Would You Turn Off Smart App Control?
There are several real and valid reasons:
- You are a developer running unsigned scripts or local builds
- You use portable apps that do not have a publisher certificate
- SAC is blocking a legitimate tool you need for work
- You keep getting blocked without any useful explanation
- You are on a managed PC and need full control over what runs
Smart App Control is well-intentioned, but it is not smart enough for every use case. Power users, developers, and IT professionals often find it too aggressive.
How to Turn Off Smart App Control in Windows 11
Here are the exact steps to disable Smart App Control on Windows 11 in 2026.
Step 1: Open Windows Security
Press the Windows key, type Windows Security, and hit Enter. You can also find it by going to Settings > Privacy and Security > Windows Security.
Step 2: Go to App and Browser Control
In the Windows Security window, click on App and Browser Control in the left sidebar. It has a browser icon next to it.
Step 3: Open Smart App Control Settings
Look for the section labeled Smart App Control. Click the link that says Smart App Control settings. This takes you directly to the toggle page.
Step 4: Set It to Off
You will see three options: On, Evaluation, and Off. Click Off.
Windows will warn you that this action is permanent and cannot be undone without reinstalling Windows. Read the warning. If you are sure, confirm your choice.
That is it. Smart App Control is now disabled.
What Happens After You Turn It Off?
Once SAC is off, Windows stops blocking apps based on reputation. Your system relies on other security layers instead, including:
- Windows Defender antivirus (still active)
- Microsoft Defender SmartScreen (separate from SAC)
- UAC (User Account Control) prompts
- Any third-party antivirus you have installed
Turning off SAC does not make your PC defenseless. You are just removing one specific layer. Your antivirus still scans files. SmartScreen still warns you about suspicious downloads in browsers. You are not flying blind.
Smart App Control vs SmartScreen: Know the Difference
A lot of people confuse these two. They are not the same thing.
| Feature | Smart App Control | Microsoft Defender SmartScreen |
|---|---|---|
| Where it works | System-wide, all apps | Mostly browser downloads and Edge |
| Can be turned off easily | No (permanent) | Yes, anytime |
| Checks against | Microsoft’s cloud AI + reputation | Known malicious URLs and files |
| Introduced | Windows 11 22H2 | Much earlier, Windows 8 era |
If you only want to stop getting warnings in your browser about downloaded files, you can disable SmartScreen separately without touching SAC. Go to App and Browser Control > Reputation-based protection settings and adjust from there.
Can You Re-Enable Smart App Control?
No. Once you set it to Off, you cannot switch it back to On or Evaluation from within Windows settings. The option simply becomes greyed out.
The only way to re-enable it is to:
- Reset the PC and choose to remove everything
- Do a clean install of Windows 11
This is by design. Microsoft wants SAC to be a commit-once decision. If you are unsure, do not turn it off yet. Leave it in Evaluation mode and see if the blocking improves over time as SAC learns your app usage.
What If Smart App Control Is Already Greyed Out?
If you open the settings and the options are already greyed out, it usually means one of these things:
- Your PC is enrolled in a corporate or school managed account, and your IT admin has locked the setting
- SAC was already turned off by someone else on this machine
- You are running an older version of Windows 11 that does not fully support SAC
If your admin has restricted it, you will need to contact them. You cannot override group policy restrictions through the normal settings UI.
How to Check Your Current Smart App Control Status
Not sure which state SAC is in right now? Here is how to check fast:
- Open Windows Security
- Click App and Browser Control
- Click Smart App Control settings
- Look at which option is selected: On, Evaluation, or Off
You can also check it via the registry if you prefer. The key is located at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy
Look for the value VerifiedAndReputablePolicyState. A value of 0 means Off, 1 means Evaluation, 2 means On.
Should You Turn Off Smart App Control?
This depends on who you are.
If you are an everyday user who just browses the web, watches videos, and uses mainstream apps, you probably do not need to turn it off. SAC will rarely bother you, and it does add a real layer of protection.
If you are a developer, system administrator, IT professional, or someone who regularly runs unsigned tools, portable software, or scripts, SAC can become genuinely disruptive. In that case, turning it off is a reasonable choice, as long as you keep your antivirus active and stay careful about what you download.
For more detailed reading on how Windows security layers interact with each other, Microsoft’s own documentation at learn.microsoft.com is a solid starting point. For independent analysis on whether to disable it, security researchers at BleepingComputer frequently cover SAC behavior in real-world scenarios.
Turn Off Smart App Control
| Step | Action |
|---|---|
| 1 | Open Windows Security |
| 2 | Click App and Browser Control |
| 3 | Click Smart App Control settings |
| 4 | Select Off |
| 5 | Confirm the warning |
Conclusion
Turning off Smart App Control in Windows is a five-click process, but it is permanent. Go to Windows Security, navigate to App and Browser Control, open Smart App Control settings, and select Off. You will get a warning that this cannot be undone without reinstalling Windows. If you accept that, the feature is gone.
SAC is useful for basic users but too restrictive for developers and power users. Disabling it does not remove all your protection. Windows Defender and SmartScreen continue working. Just make sure you know what you are doing before you flip the switch.
Frequently Asked Questions
Can I turn Smart App Control back on without reinstalling Windows?
No. Once you disable it, the only way to re-enable Smart App Control is to reset or reinstall Windows 11. Microsoft designed it this way intentionally to prevent users from constantly toggling it, which would reduce its effectiveness.
Will turning off Smart App Control affect Windows Defender?
No. Windows Defender Antivirus operates independently of Smart App Control. Disabling SAC does not disable your antivirus. Your real-time protection, malware scanning, and threat detection all continue to work normally.
Why is Smart App Control blocking a legitimate app?
SAC blocks apps that either lack a valid code signature or have low reputation in Microsoft’s cloud database. Small developers, open-source tools, and new software often fall into this category even when they are completely safe. This is the most common reason users choose to disable SAC.
Is Smart App Control available on Windows 10?
No. Smart App Control is exclusive to Windows 11. It was introduced with the Windows 11 22H2 update. Windows 10 uses Microsoft Defender SmartScreen for similar but more limited reputation-based protection.
What is the difference between Smart App Control being Off and being in Evaluation mode?
In Evaluation mode, SAC monitors your app usage quietly without blocking anything. It uses this data to decide whether your usage patterns are safe enough to turn On automatically. In Off mode, the feature is completely disabled and does nothing. If SAC switched itself to Off after Evaluation, it means it determined your usage was too complex for it to protect without causing disruption.
