Microsoft has issued an update regarding Smart App Control (SAC). The feature was originally documented in the January 2026 non-security update (KB5074105 ), but that documentation has now been removed. Microsoft states the change is planned for a future release instead. So what happened - and what does it mean for you?

What Is Smart App Control?

Smart App Control (SAC) is a security feature built into Windows 11. It uses code signing and Microsoft's cloud intelligence to block:
  • Untrusted applications
  • Potentially malicious software
  • Unsigned or suspicious executables
Unlike traditional antivirus, SAC works proactively. If an app isn't considered trustworthy, it simply will not run. Think of it as a lightweight application control policy designed for everyday users.

What Was Announced?

In the January 2026 update notes (KB5074105), Microsoft stated:
  • You would be able to turn Smart App Control on or off without requiring a clean installation of Windows, as was previously required.
  • The setting would be available under: Windows Security > App & Browser Control > Smart App Control
Previously, enabling SAC required a clean install of Windows 11. If you turned it off, you could not re-enable it without reinstalling the operating system. This was a major usability improvement. However, Microsoft has now removed this documentation and says the feature will arrive in a future release instead.

What This Means Right Now

Currently:
  • If Smart App Control is already enabled on your system, it continues working as normal.
  • If you turned it off previously, you still cannot re-enable it without a clean Windows install.
  • The toggle without reinstall is not yet available.
In short: the feature is delayed - not canceled.

Why This Matters

For power users, gamers, and homelab enthusiasts, this change is significant. Many users disable SAC temporarily when:
  • Testing unsigned software
  • Running niche tools
  • Developing applications
Requiring a full OS reinstall to turn it back on has always been excessive. The promised toggle would make SAC far more practical. From a security standpoint, making it easier to re-enable, means:
  • More users are likely to turn it back on
  • Reduced long-term exposure after testing software
  • Stronger default protection across systems

Should You Use Smart App Control?

If you:
  • Install software from random sources
  • Download utilities frequently
  • Support less technical family members
SAC is a strong additional security layer. If you:
  • Regularly compile or test unsigned software
  • Run custom scripts and niche tools
  • Manage lab or development environments
It may be too restrictive unless Microsoft's upcoming toggle makes it more flexible.

How Does Smart App Control Work?

Smart App Control uses a combination of code signing and Microsoft's cloud intelligence to determine whether an application is trustworthy. If an app is not considered safe, SAC will block it from running, providing a proactive layer of security. This approach is different from traditional antivirus software, which typically relies on signature-based detection and heuristics. SAC's proactive blocking can help prevent the execution of potentially malicious software before it can cause harm.

What Does This Mean For False Positives?

While SAC is designed to be accurate, there is always a possibility of false positives, especially with niche or unsigned applications. If you rely on such software, it's important to weigh the security benefits of SAC against the potential inconvenience of having to disable it temporarily. With the upcoming toggle, users will have more flexibility to manage this balance without needing to reinstall Windows.

Can You Allow an Application that SAC has Blocked?

Currently, if SAC blocks an application, there is no built-in way to allow it without disabling SAC entirely. This is one of the reasons why the upcoming toggle is so important - it will provide users with the ability to re-enable SAC after testing or using specific applications, without the need for a complete OS reinstall.

Final Thoughts

This is a sensible ... delayed ... change. Requiring a clean install to re-enable a security feature was never practical. When Microsoft reintroduces the toggle, Smart App Control will become much more viable for technical users who occasionally need flexibility. Until then, if you rely on SAC, think carefully before disabling it - you may not be able to turn it back on without reinstalling Windows.