Windows Smart App Control broken

Auquier Cyril 35 Reputation points
2026-10-03T11:41:12.31+00:00

Hello,

It often happens that windows Smart App Control block some of my application and then after one or multiple reboot of my pc the app isn't blocked or sometimes after a reinstall of the same exe.

But what annoys me, is that sometime the apps (like games) or my custom apps that i developp are blocked but shouldn't be.

I know that if i restart my computer one in two, the app i developp won't be blocked. But after a few modification, that do not imply more access to the computer functionnalities, the app i blocked AGAIN.

A workaround could be to disable the Smart App Control, but i read that i can be a real pain to enable afterward (it seems that i'll need to reinstall windows).

Is there possible to make the Smart App Controll less agressive? Or maybe make it ignore some app or path?

I think that could be a great idea to be able to do that.

Windows for home | Windows 11 | Security and privacy
0 comments

2 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Hendrix-V 19,485 Reputation points Microsoft External Staff Moderator
    2026-10-03T23:35:10.7233333+00:00

    Hi Auquier Cyril,

    Based on the current design of Smart App Control, individual application or folder exclusions are not available. If you're developing or testing your own applications, one practical step is to ensure the executable is digitally signed with a trusted code-signing certificate, as application reputation and trust signals can influence how Smart App Control evaluates software.

    For additional troubleshooting, you can follow the steps from AI answer then review Smart App Control events in Event Viewer. If the behavior continues to interfere with your workflow, you may consider temporarily turning off Smart App Control after evaluating the security implications for your environment.

    If you're seeing inconsistent results with the same application over time, it may be helpful to submit feedback through Feedback Hub (Windows + F) so the Windows team can review the behavior and determine whether additional investigation is needed.

    Please note that this is a user-to-user support forum. Moderators, contributors including external Microsoft employees cannot directly intervene in Microsoft product features or access back-end systems. Our role is limited to providing technical guidance on reported issues, requests, or ideas.

    Thank you for sharing your findings with the community.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-03T11:41:32.3433333+00:00

    No. Smart App Control does not support allow-listing a specific app or ignoring a path.

    What is supported:

    1. Open Settings > Windows Security > App & browser control > Smart App Control settings.
    2. Check the current mode:
      • Evaluation: Smart App Control is assessing suitability and does not block apps.
      • On: enforcement mode; untrusted apps can be blocked.
      • Off: no Smart App Control blocking.
    3. If Smart App Control is On, it can be turned Off in Windows Security.
    4. Recent Windows updates allow Smart App Control to be re-enabled in the Windows Security app without requiring a clean installation.

    Important limits relevant to this scenario:

    • There is currently no way to bypass Smart App Control for one specific app.
    • There is currently no path-based exclusion described for Smart App Control.
    • For custom apps, Smart App Control allows apps to run when they are trusted by the prediction model or have a valid signature. If an app is unsigned or has an invalid signature, it is considered untrusted and can be blocked.
    • Microsoft notes that developers and some corporate users may be automatically identified as poor candidates for Smart App Control, and in those cases Smart App Control can be turned off automatically.

    If the goal is to understand why a specific build is blocked, check the event log:

    1. Open Event Viewer.
    2. Go to Application and Services Logs > Microsoft > Windows > CodeIntegrity > Operational.
    3. Review:
      • 3076 events for evaluation mode
      • 3077 events for enforcement mode

    That log records blocked or audited files, but it does not explain installer-level failures. For an app or game installer, the useful step is to identify which individual file inside the installer was blocked.

    For a custom-developed app, the practical options supported here are:

    • keep Smart App Control On and ensure the app has a valid signature, or
    • turn Smart App Control Off if the blocking is not acceptable.
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.