C:\Windows\System32>reg query HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy /v VerifiedAndReputablePolicyState 'C:\Windows\System32\reg.exe' was blocked by your organization's Device Guard policy. Contact your support person for more info.

Use Windows Recovery to reinstall or reset Windows through Settings, because the enforced Device Guard/App Control policy is blocking core tools such as cmd.exe, reg.exe, and Registry Editor, so command-based repairs cannot run.

The missing Smart App Control section means this should not be treated as a normal Smart App Control toggle problem. App Control policies can operate separately, and identifying or removing one safely normally requires working administrative tools.

1. Try the nondestructive recovery option first

1. Back up important documents, pictures, and other personal files.
2. Open Settings → System → Recovery.
3. If Reinstall now appears under Fix problems using Windows Update, select it.
4. Allow Windows to reinstall the current version and restart.

This recovery option reinstalls Windows without affecting files, installed applications, or settings and is the preferred option before resetting the PC.^1^

Afterward, test:

• Command Prompt
• Registry Editor
• Chrome
• The NVIDIA installer downloaded again from NVIDIA or ASUS

2. If “Reinstall now” is unavailable or does not fix it

Reset Windows while retaining personal files:

1. Back up important files.
2. If device encryption is enabled, obtain the BitLocker recovery key before proceeding.
3. Open Settings → System → Recovery → Reset PC.
4. Select Keep my files.
5. Choose Cloud download to obtain fresh Windows files rather than reuse potentially damaged local files.
6. Complete setup, run Windows Update, and then install ASUS chipset/display drivers before reinstalling Chrome and the NVIDIA app.

Keep my files preserves personal files but removes applications and settings. Cloud download downloads a fresh Windows copy.^2^

Do not interrupt the reset if the screen stays black for some time; Microsoft notes that this can occur during recovery.

3. If Settings or Reset PC is also blocked

Enter the Windows Recovery Environment without using Command Prompt:

1. Open Start → Power.
2. Hold Shift and select Restart.
3. Select Troubleshoot → Reset this PC → Keep my files.
4. Prefer Cloud download, if offered.

Windows RE provides recovery and reset tools independently of the blocked desktop command-line utilities.^3^

If Windows RE cannot complete the reset, use ASUS recovery media intended for the exact laptop model. Manufacturer recovery images normally include hardware-specific drivers and factory applications.^1^

Why not manually delete the Device Guard policy?

Do not delete .cip or SiPolicy.p7b files based on generic online instructions. Microsoft documents that:

• The original deployment mechanism must be disabled first, or it can redeploy the policy.
• Signed base policies require a properly signed replacement policy before removal.
• Incorrectly tampering with a signed policy can cause a boot failure or BSOD.^4^

The documented CiTool.exe removal procedure also requires an elevated command window—which this policy currently prevents you from opening.

If the laptop belongs to an organization

Check Settings → Accounts → Access work or school. If a company or school account is connected, do not reset or remove its policy without authorization; contact that organization’s administrator. An MDM-managed App Control policy must be removed through its management system before deleting the local policy, otherwise it can return.^4^

If this is a personally owned ASUS laptop and it became restricted immediately after purchase or servicing, contact the seller or ASUS as well—the machine may have been supplied with an unintended provisioning or policy configuration.

References

1. Recovery options in Windows | Microsoft Support
2. [Windows 11](https://support.microsoft.com/windows/experience/backup-recovery/reset-your-pc#reset-steps)
3. Windows recovery environment | Microsoft Support
4. Remove App Control for Business policies