There is currently no way to allow or unblock one specific app in Smart App Control.
Available options:
- Check Smart App Control status
- Go to Settings > Windows Security > App and Browser Control.
- If it shows On, Smart App Control is enforcing blocks.
- If it shows Evaluation, it is only evaluating.
- If it shows Off, it is not active.
- Turn Smart App Control off
- Open Windows Security > App & browser control > Smart App Control settings.
- Set it to Off if the blocked app must run.
- Smart App Control can also be turned on manually in Windows Security if it is available on the device, and recent Windows updates allow it to be re-enabled without a clean installation.
- Use a properly signed version of the app
- Smart App Control allows apps if the cloud security service predicts they are safe, or if they have a valid signature.
- If the app is unsigned or has an invalid signature and the service cannot determine it is safe, it is treated as untrusted and blocked.
- The recommended fix is to get the latest version from the app developer and use a version signed with a valid certificate.
- Check what was blocked
- Open Event Viewer.
- Go to Application and Services Logs > Microsoft > Windows > CodeIntegrity > Operational.
- Look for event ID 3076 for evaluation mode or 3077 for enforcement mode.
- These logs show which individual files were blocked or audited.
Important:
- There is no per-app bypass in Smart App Control.
- Registry-based changes exist for testing, but they are for testing purposes only and can reduce protection.
References: