Windows 11 update causes security feature to fail

The October 2023 update for Windows 11 has introduced a bug that disables a key security feature called Smart App Control. This feature is designed to block potentially harmful applications and files from running on a user's computer.

Smart App Control aims to block malicious software

Smart App Control was introduced in 2022 and is more advanced than other built-in security settings. It helps protect users from new and evolving threats by preventing unauthorized or suspicious programs from executing.

Bug prevents users from turning on the feature

If Smart App Control is currently disabled on a user’s computer, the October update makes the button to enable it grayed out and unclickable. However, if the feature is already enabled, it remains active. Testing on multiple Windows 11 computers confirmed that the grayed-out issue occurs only on updated systems.

Microsoft is working on a fix

Microsoft has acknowledged the issue and is working on a fix that will be included in a future update. In the meantime, users can manually enable the feature by editing the Windows Registry using specific commands provided by Microsoft.

Users can manually enable the feature

To check if affected, users should go to Settings, select Privacy and Security, then click on Windows Security. In the "Protection Areas" section, they should select "App and Browser Control" and click on the "Smart App Control Settings" link. If the "On" option is grayed out, the user is affected by the bug.

Registry edit allows feature to be reactivated

To bypass the problem, users should open a command prompt as an administrator and run two specific registry commands. After running these commands and restarting the computer, the "Enabled" option should become available again in Smart App Control settings.

Smart App Control offers protection with some trade-offs

Enabling Smart App Control is generally recommended to block potentially harmful software. However, it can be inconvenient for users who frequently download files from unknown sources. Users can disable the feature if needed, but it is advised to test it first to see if it can be adapted to their workflow.