How to Set Up Windows 11 Smart App Control to Block Untrusted Applications on Your Business PC

Security & Access KB-990

Summary

This guide helps you troubleshoot and resolve: How to Set Up Windows 11 Smart App Control to Block Untrusted Applications on Your Business PC. Follow the steps below to fix the issue.

Quick Tip: Need immediate assistance? 💻 Open a Ticket

Common Causes

Windows 11 Smart App Control is a security feature designed to protect your business PC from malicious or untrusted applications. It uses cloud-based intelligence to analyse apps before they run, blocking anything that lacks a valid digital signature or exhibits suspicious behaviour. For small business owners, this adds an essential layer of defence against malware and unwanted software without requiring complex antivirus configuration.

Quick Fix Steps

Open Settings.
Navigate to Privacy & security > Windows Security.
Click App & browser control.
Select Smart App Control settings.
Turn Smart App Control On.

Detailed Instructions

Before You Begin

Smart App Control can only be enabled on a clean installation of Windows 11. If your device has been in use for some time, you may need to reset Windows or perform a clean install before the option becomes available. Ensure you are signed in as an administrator.

Enable Smart App Control

Click the Start button and select Settings, or press Windows key + I.
In the left-hand menu, click Privacy & security.
Select Windows Security, then click the Open Windows Security button.
In the Windows Security window, choose App & browser control.
Under the Smart App Control section, click Smart App Control settings.
Select On to activate protection. Windows will verify that your system is eligible.

Note: If Smart App Control is already set to Evaluation mode, Windows is assessing whether the feature can run without blocking apps you regularly use. After the evaluation period, it will automatically switch to On or Off.

Review Blocked Apps

Open Windows Security.
Go to App & browser control > Protection history.
Look for items labelled Smart App Control to see which applications were blocked.
If a trusted business application was blocked, you may need to obtain a digitally signed version from the software vendor.

Troubleshooting

Smart App Control Option is Missing

Ensure you are running Windows 11, version 22H2 or later.
Confirm the device is not managed by an organisation policy that disables the feature.
Smart App Control requires a clean Windows installation. If you upgraded from Windows 10, the option may not appear.

Legacy Business Software is Blocked

Smart App Control blocks unsigned or poorly signed applications.
Contact the software vendor to request a digitally signed version.
Do not disable Smart App Control entirely; instead, evaluate whether the application is safe to run.

Warning: Turning Smart App Control off requires a full reset of your Windows device to re-enable it later. Only disable it as a last resort.

If you need assistance configuring Smart App Control or recovering a blocked application, Open a Ticket with our Brisbane support team.

For related security guidance, see our article on Password reset (Windows login).

Still Having Issues?

Need more help? If the issue persists after trying these steps, please open a support ticket and our team will assist you.

💻 Open a Ticket