Помимо знакомых параметров в настройках встроенного антивируса Microsoft Defender, пользователи Windows 11 могут обратить внимание на функцию «Интеллектуальное управление приложениями», причём часто изменение параметров её работы недоступно.
В этом материале о том, что представляет собой новая функция, особенности её включения или отключения и дополнительная информация на тему, которая может быть полезной.
Что такое «Интеллектуальное управление приложениями»
Служба «Интеллектуальное управление приложениями» (Smart App Control, SAC) в Windows 11 — это дополнительный инструмент защиты от небезопасных приложений (помимо фильтра Smart Screen и защиты на основе репутации), призванный предотвращать их выполнение. Механизм работает следующим образом:
- Если функция «Интеллектуальное управление приложениями» включена, облачная «интеллектуальная служба безопасности» Майкрософт оценивает потенциальные риски выполнения запускаемой программы.
- В случае, если угроз безопасности не найдено, Smart App Control разрешает выполнение приложения.
- Если в результате оценки сделан вывод о потенциальной нежелательности или вредоносности программы, её запуск будет заблокирован.
- В тех случаях, когда проверка с помощью облачного сервиса невозможна, решение принимается на основании действительной цифровой подписи исполняемого файла приложения.
Помимо исполняемых файлов .EXE, Smart App Control может блокировать файлы образов ISO, ярлыков LNK и ряд других: .appref-ms, .bat, .cmd, .chm, .cpl, .js, .jse, .msc, .msp, .reg, .vbe, .vbs и .wsf
При попытке запуска программы, которую Smart App Control посчитает небезопасной, пользователь увидит уведомление «Интеллектуальное управление приложениями заблокировало файл, который может быть небезопасным»:
Также в окне будет отображаться пояснение о причинах блокировки, например: «Этот файл заблокирован, так как файлы этого типа из Интернета могут быть опасными». Добавление отдельных файлов или расположений в исключения на момент написания этого материала недоступно.
Включение и отключение функции
Настройки функции «Интеллектуальное управление приложениями» выполняется в окне «Безопасность Windows», открыть которое можно, используя значок в области уведомления панели задач или в Параметры — Конфиденциальность и защита — Безопасность Windows — Открыть службу «Безопасность Windows».
Для перехода к настройкам функции перейдите в раздел «Управление приложениями и браузером» и нажмите по ссылке «Параметры службы Интеллектуальное управление приложениями» в соответствующем разделе:
Включение и отключение функции имеет свои особенности по сравнению с другими опциями в окне «Безопасность Windows»:
- После чистой установки Windows 11 служба «Интеллектуальное управление приложениями» переключается в режим «Оценка» для того, чтобы оценить, насколько её включение может сказаться на пользовательском опыте — не будут ли постоянно блокироваться регулярно используемые или скачиваемые пользователи программы. По результатам будет выполнено либо автоматическое включение, либо — отключение функции.
- Пока служба находится в режиме оценки, вы можете её включить или отключить принудительно вручную.
- Если после оценки был сделан вывод о том, что функцию расширенной защиты от недоверенных приложений следует отключить и она была автоматически отключена, включить её без чистой установки или сброса Windows 11 не получится — соответствующие пункты будут недоступны.
- Если функция включена или находится в режиме оценки, её можно отключить вручную, при этом вы увидите предупреждение о необходимости переустановки системы в дальнейшем, если потребуется снова её включить:
Теоретически, функция может быть полезной, но лишь в случае, если пользователь почти никогда не запускает новые приложения из Интернета, либо речь идёт о каком-либо корпоративном компьютере. Иначе рано или поздно при необходимости запуска неизвестной «Интеллектуальному управлению приложениями» программы придётся отключить функцию, а повторное её включение в текущей реализации недоступно.
This tutorial will show you how to manually turn on or off Smart App Control in Windows 11.
Smart App Control (SAC) is a new security feature starting with Windows 11 build 22567. Smart App Control can work alongside your other security software, such as Microsoft Defender, for added protection.
Smart App Control adds significant protection from malware, including new and emerging threats, by blocking apps that are malicious or untrusted. Smart App Control also helps to block potentially unwanted apps, which are apps that may cause your device to run slowly, display unexpected ads, offer extra software you didn’t want, or do other things you don’t expect.
Smart App Control starts in evaluation mode. This is a period during which Windows tries to determine if you’re a good candidate for Smart App Control. If you are a good candidate for Smart App Control, then it will automatically be turned on. If not, it’ll be turned off.
Smart App Control won’t block anything while it’s in evaluation mode.
Once the evaluation is complete, or if you manually switch Smart App Control on or off, you won’t be able to return to evaluation mode unless you reset or reinstall Windows.
In order to ensure a more secure experience Microsoft only enables Smart App Control on a clean install of Microsoft Windows 11. Microsoft wants to be sure that there aren’t already untrusted apps running on the device when they turn Smart App Control on. That’s why in order to turn Smart App Control back on after it’s been turned off, you’ll need to reset or reinstall Windows.
There is currently no way to bypass Smart App Control protection for individual apps. You can turn Smart App Control off, or (better yet), contact the developer of the app and encourage them to sign their app with a valid signature.
Smart App Control is only available on clean installs of Windows 11. Also, there are other reasons why Smart App Control could be turned off.
- During evaluation mode Microsoft determined that you weren’t a good candidate for Smart App Control.
- It was turned off manually by you or another user signed into your machine.
- Your device is running Windows in S mode. You’ll need to turn S mode off, then reset your PC, to enter evaluation mode.
- You have optional diagnostic data in Windows turned off. If you want to turn Smart App Control on, you’ll need to reset this PC, or reinstall Windows, and select Send optional diagnostic data during the setup process.
Note: At this time Smart App Control is only recommended in the North American and European regions.
References:
Application Control for Windows
Application Control restricts which applications users are allowed to run and the code that runs in the system core.
learn.microsoft.com
You must be signed in as an administrator to turn on or off Smart App Control
Contents
- Option One: Turn On or Off Smart App Control in Windows Security
- Option Two: Turn On or Off Smart App Control using REG file
EXAMPLE: Smart App Control blocked an app that may be unsafe
1 Open Windows Security.
2 Click/tap on App & browser control in the left pane, and click/tap on the Smart App Control settings link on the right side. (see screenshot below)
3 Select On or Off for what you want. (see screenshot below)
To turn Smart App Control back on after it’s been turned off, you’ll need to clean install or reset Windows 11 build 22567 or higher.
Option Two
Turn On or Off Smart App Control using REG file
To turn Smart App Control back on after it’s been turned off, you’ll need to clean install or reset Windows 11 build 22567 or higher.
1 Do step 2 (on), step 3 (evaluation), or step 4 (off) below for what you would like to do.
2 Turn On Smart App Control
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Turn_ON_Smart_App_Control.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy]
"VerifiedAndReputablePolicyState"=dword:000000013 Set Smart App Control to Evaluation Mode
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Set_Smart_App_Control_to_Evaluation_mode.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy]
"VerifiedAndReputablePolicyState"=dword:000000024 Turn Off Smart App Control
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Turn_OFF_Smart_App_Control.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy]
"VerifiedAndReputablePolicyState"=dword:000000005 Save the .reg file to your desktop.
6 Double click/tap on the downloaded .reg file to merge it.
7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
8 You can now delete the downloaded .reg file if you like.
That’s it,
Shawn Brink
Related Tutorials
- Enable or Disable Microsoft Defender SmartScreen Check Apps and Files from Web in Windows 11
- Enable or Disable Microsoft Defender SmartScreen for Microsoft Store Apps in Windows 11
-
Set_Smart_App_Control_to_Evaluation_mode.reg
Set_Smart_App_Control_to_Evaluation_mode.reg
628 bytes
· Views: 905
-
Turn_OFF_Smart_App_Control.reg
Turn_OFF_Smart_App_Control.reg
628 bytes
· Views: 7,600
-
Turn_ON_Smart_App_Control.reg
Turn_ON_Smart_App_Control.reg
628 bytes
· Views: 1,283
(Image credit: Future)
The Windows 11 2022 Update (version 22H2) comes with Start App Control (SAC). This new security feature has been designed to lock down the computer to allow only programs signed with a valid certificate or known to be trusted.
Smart App Control aims to block malicious and untrusted applications that may cause unwanted behaviors, such as showing advertisements, slowing down computer performance, or installing unsolicited software.
When you enable the feature, as you run an application, Smart App Control will check the digital certificate to verify the developer’s identity and confirm that the app hasn’t been tampered with by someone else. Also, it will use the Microsoft cloud-powered technology service to predict if the app is safe or not based on many signals.
If, after checking the app, the security feature can’t make a prediction or the signature is not valid, it’ll be considered untrusted and will be blocked.
This guide will walk you through the steps to enable and disable Smart App Control on your Windows 11 (version 22H2) computer.
How to enable Smart App Control on Windows 11
Smart App Control is only available on new devices or clean installations of Windows 11 version 22H2 because, according to Microsoft, it’s the only way to guarantee that the computer is not using any untrusted application.
If you want to check whether the feature is available, you can use the Windows Security app. If SAC isn’t available, you will have to reinstall Windows 11 by doing a clean install or using the recovery settings to reset the system to the factory defaults.
All the latest news, reviews, and guides for Windows and Xbox diehards.
Check whether the feature is available
To determine if Smart App Control is available on your computer, use these steps:
- Open Start.
- Search for Smart App Control and click the top result to open the app.
- Confirm the Smart App Control status.
If none of the options are greyed out, then you may be able to enable the feature. However, if you can’t select any of the options or the feature is off by default and the other options are greyed out, you will need to go through the reinstallation process.
In the case that the feature is already in «Evaluation» mode, allow the system to continue to run the monitoring and determine if your computer is a good candidate to use Smart App Control.
Reset the computer to default settings
Before proceeding, it’s important to note that even though this process will preserve your files, it’s still a good idea to back them up. Also, the reset process will remove your settings and delete your apps.
To reinstall Windows 11 to make Smart App Control available, use these steps:
- Open Settings.
- Click on System.
- Click the Recovery page on the right side.
- Under the «Recovery options» section, click the Reset PC button.
- Select the Keep my files option.
- Select the Local reinstall option.
- Click the Next button.
- Click the Reset button.
After you complete the steps, the system will reinstall Windows 11 (version 22H2), keeping your files. Once on the desktop again, don’t install any applications. Instead, proceed to enable Smart App Control with the steps below.
Enable Smart App Control
To enable Smart App Control on Windows 11 version 22H2, use these steps:
- Open Start.
- Search for Smart App Control and click the top result to open the app.
- Select the Evaluation option.
After you complete the steps, Smart App Control will run automatically without blocking anything to monitor and learn to determine if the feature will work on your computer.
The system will turn on the feature automatically if the device can use it, meaning if the Smart App Control determines that it won’t break your workflow often.
On the other hand, if the evaluation doesn’t return favorably, meaning if the feature detects that it will generate a lot of interruptions, negatively affecting the experience, then the system automatically turns off Smart App Control.
Also note that sometimes developers, advanced users, and other types of users may perform tasks with legitime apps that will trigger Smart App Control very often. If this is the case during the evaluation, the feature won’t turn on.
After the evaluation, if the feature turns on automatically, you won’t be able to run the evaluation mode unless you reinstall Windows 11 again. Also, if the feature then blocks an application, you won’t be able to get around the block unless you turn off the feature, in which case, to enable it again, you will need to reinstall the operating system.
If you don’t want to run the evaluation mode, you can enable «Smart App Control» directly. However, it’s not a good idea since the feature may not work as expected, causing a lot of interruptions that can negatively affect the experience.
How to disable Smart App Control on Windows 11
If you plan to disable Smart App Control, consider that you won’t be able to re-enable it. This is to ensure a secure experience. Otherwise, the system won’t be able to tell if the device already has an untrusted application. In the future, you will need to reinstall the operating system to enable it again.
To disable Smart App Control on Windows 11, use these steps:
- Open Start.
- Search for Smart App Control and click the top result to open the app.
- Select the Off option.
Once you complete the steps, the feature will turn off on the device. Again, you won’t be able to enable Smart App Control until you reinstall the operating system.
Although Smart App Control is a convenient feature, it’s not for everyone. If you’re a developer or an advanced user, you will probably be doing actions and running apps that the feature will be considered untrusted. If this is your case, SAC may not be for you. On the other hand, if you are an average Joe or you’re on a business computer, you may benefit from the extra layer of protection using this feature.
Also, the feature is not an antivirus replacement. Instead, Smart App Control runs alongside Microsoft Defender Antivirus to add an extra layer of protection.
Finally, if you can’t find this feature, you are not running the version of Windows 11 that supports it or are not using your device in a supported region since Smart App Control is currently only available in North American and European regions.
More resources
For more helpful articles, coverage, and answers to common questions about Windows 10 and Windows 11, visit the following resources:
- Windows 11 on Windows Central — All you need to know
- Windows 10 on Windows Central — All you need to know
Mauro Huculak has been a Windows How-To Expert contributor for WindowsCentral.com for nearly a decade and has over 15 years of experience writing comprehensive guides. He also has an IT background and has achieved different professional certifications from Microsoft, Cisco, VMware, and CompTIA. He has been recognized as a Microsoft MVP for many years.
What is Smart App Control?
Smart App control in your Windows 11 is Windows security which adds up extra protection to the windows from the malware and emerging threats that come from some untrusted apps, malware, and also potentially unwanted apps. It blocks all these mentioned apps and prevents the windows to run slow, unnecessary ads getting displayed, unwanted pop-ups, and many other such things.
We normally run the apps on the windows and control them, this process is manual and is done by us. But we do not know which is harmful and detect it. Smart App control is introduced to look after and helps with this problem. When you are running the apps in your windows, Smart App control will first check if the cloud-powered security service will be able to make a firm prediction about the security and safety of the windows. If this service guarantees that the app will be safe, then the Smart app control feature will allow that to run in your windows. If it detects that apps are malware that can be harmful, then Smart App control will not allow running in your windows, and it will block them.
Also Read: How To Screen Record On Windows 11 Without Downloading Software
How to turn on or off Smart App Control Settings in your Windows:
You can easily access this setting on your Windows 11 PC. Just follow the below-given steps.
Click on the windows button which is present in the left corner at the bottom of your screen and type Smart App Control in the window search bar. Select the Smart App Control system settings.
Or another way is to click on the windows start button and type Windows security in the search bar and Select open.
This will direct you to the Windows security window. In the panel, select the option App and Browser option.
In this, you can see the Smart app control option, click on the smart app control settings.
This will direct you to smart app control settings windows. Here you will be able to see three options that are on, evaluation, and off.
On: When it is On mode, it will block all the malicious or any untrusted apps.
Evaluation: In this mode, this feature will evaluate if the app disturbs you very much, it will block it in the future.
Off: Once it is turned off mode, it can be turned on again after reinstalling the windows. This might not also block the malicious apps.
Evaluation mode in the smart app control is a period that analyzes whether you are a good candidate to use the smart app control. If you are good enough, the evaluation mode will automatically be turned on. If you are not good enough, it will be turned off and will not block any malicious apps when it is in evaluation mode.
Also Read: XDA Basics: How To Record Your Screen In Windows 11?
Why can I not access Smart App Controls right now?
Microsoft accessed this feature only for good candidates. This is due to sometimes this feature will provide false negatives which might cause problems that will affect the performance of your operating system. This is known as the testing of the application in the Evaluation mode. This option will be available only for the fresh installs of Windows 11 only. If you are not able to find the option, your operating system is not installed freshly or another reason might be that you are not a good candidate.
Why are you unable to return to evaluation mode for Smart App Control?
when the period of evaluation mode is over you will not be able to return to evaluation mode. Then another reason might be that you have turned ON or OFF the smart app control manually, even due to this you will not be able to return to the evaluation mode. The only way to resolve this is to reinstall your operating system and then you will be able to return to the evaluation mode.
Can I Turn Smart App Control ON or OFF manually?
Yes, you can easily turn on or off the smart app control manually from the settings option and smart app control window. But the best recommendation is that too let the evaluation mode decide on this feature. As it will determine your operating system and the activities to analyze whether you are a good candidate or not.
Also Read: Windows 10 Fail To Launch At Startup: Fixed
Conclusion:
This article will tell all the information regarding what is smart app control, how it works, evaluation mode, and also much more things. this feature is really good to protect your windows from untrusted and malicious apps. I hope this article is informative and you got the information which you need.
-
Home
-
News
- What Is Smart App Control? How to Turn on/off Smart App Control?
By Stella | Follow |
Last Updated
The Windows 11 2022 Update, Version 22H2 is released with a new security called Smart App Control. Do you know what Smart App Control is, and how to turn it on or off? In this post, MiniTool Software will introduce the answers to these questions.
What Is Smart App Control?
Smart App Control is a new security feature in the Windows 11 2022 Update, Version 22H2. It is designed to add significant protection from new and emerging threats by blocking apps that are malicious or untrusted. It can also help you block apps that may slow down your computer, show unexpected ads, or install extra software you don’t want to use or don’t have your permission for.
It can work with the Windows built-in Microsoft Defender or third-party antivirus software.
Importance!
Smart App Control is only available on new Windows 11 installs. You can’t find Smart App Control if you get the update via Windows Update in the Settings app. If you want to use this feature on your device, you need to reset your PC or reinstall your computer with Windows 11 22H2.
Additionally, to get a better experience, you should make sure that you are using the latest Windows OS and Defender.
- See how to update Windows 11.
- See how to update Microsoft Defender.
How to Turn on Smart App Control?
Smart App Control starts in evaluation mode. Windows tries to determine if you’re a good candidate for Smart App Control during this period. If you are, Smart App Control will automatically be turned on. If not, it’ll be turned off.
If Smart App Control is turned off, you can use these steps to turn it on:
Step 1: Clean install or reinstall the latest version of Windows 11 on your device.
Step 2: Press Windows + I to open the Settings app.
Step 3: Go to Privacy & security > Windows Security > App & browser control.
Step 4: Click Smart App Control settings.
Step 5: On the next page, select On.
How to Turn off Smart App Control?
You can turn off Smart App Control anytime you want. For example, if it causes problems, you can disable it. If you don’t want to use it for no reason, you can turn it off.
Here are the steps to disable Smart App Control on Windows 11:
Step 1: Press Windows + I to open the Settings app.
Step 2: Go to Privacy & security > Windows Security > App & browser control.
Step 3: Click Smart App Control settings.
Step 4: On the next page, select Off.
How Does Smart App Control Work?
When you want to open an app on your Windows 11 computer, Smart App Control will begin to check if Microsoft’s intelligent cloud-powered security service can make a confident prediction about its safety. If the security service thinks the app is safe, Smart App Control will allow the app to run. If the security service thinks the app is malicious or potentially unwanted, Smart App Control will block it on your device.
There is another possibility: the security service can’t make a confident prediction about the app you want to run. In a situation like this, Smart App Control will begin to check if the app has a valid signature. If it has one, Smart App Control will let it run. If the app doesn’t have a valid signature or the app is unsigned, Smart App Control will block it to protect your computer.
Recover Your Data
If you lose your files due to a virus attack, do you know how to get them back? You can try MiniTool Power Data Recovery, professional data recovery software for Windows.
MiniTool Power Data Recovery TrialClick to Download100%Clean & Safe
This free file recovery tool is designed to recover your files from all types of data storage devices as long as they are not overwritten by new data.
Bottom Line
Now, you should know what Smart App Control is and how to turn it on or off on your Windows 11 computer. To protect your computer, you’d better turn it on. Should you have other related issues, you can let us know in the comments.
About The Author
Position: Columnist
Stella has been working in MiniTool Software as an English Editor for more than 8 years. Her articles mainly cover the fields of data recovery including storage media data recovery, phone data recovery, and photo recovery, videos download, partition management, and video & audio format conversions.