How To

Smart App Control Is Grayed Out in Windows 11: How to Fix It

Vaibhav Chhabra ,

Summary

Smart App Control grayed out usually has a clear cause: an old Windows build, an earlier shut-off, a work policy, or the October 2026 KB5127648 update. Check your state and version, install updates, and use Microsoft’s registry workaround if needed. Back up first. Reset Windows only as a last resort.

If Smart App Control grayed out is what you see in Windows Security, check three things first: your Windows version, whether the October 2026 update (KB5127648) is installed, and whether Smart App Control was turned off earlier. Microsoft has acknowledged that installation of that update will gray out the On option. Also Microsoft has published a temporary registry workaround.

You open Windows Security, find Smart App Control, and the On and Evaluation options will not respond. Smart App Control is a feature in Windows 11 that protects your computer from running untrusted or unsigned programs before they run. This guide will explain why you can’t change it and how to get it working again.

Quick Answer: 6 Steps

  1. Open Windows Security > App & browser control > Smart App Control settings and note the state: On, Evaluation or Off.
  2. Confirm you run Windows 11 22H2 or later.
  3. Ensure your windows has all current versions updated and restart after update.
  4. If you installed KB5127648 and Smart App Control was off, apply Microsoft’s workaround below.
  5. Check for a work or school policy.
  6. As a last resort, reset Windows.

What Does Smart App Control Do?

According to Microsoft’s documentation, Smart App Control combines Microsoft app intelligence services with Windows code integrity features. It lets apps run if they are likely to be safe, and it blocks malware, potentially unwanted apps and unknown, unsigned code by default. If the intelligence service cannot make a prediction, an app can still run when it is signed with a certificate from a Trusted Root Program CA.

Why Is Smart App Control Grayed Out?

Cause What it means
KB5127648 update Microsoft says the option may be grayed out and cannot be toggled on devices where Smart App Control was already off.
Older rule: clean install only. Before 2026, Smart App Control was only available on new devices or clean installs of 22H2, according to Windows Central
It was turned off before On older builds, turning it off was permanent without a reinstall.
Windows 10 or an old Windows 11 version Smart App Control is not available on Windows 10, according to Pureinfotech
Organization policy Guiding Tech lists a managed policy as a cause

How to Fix Smart App Control Grayed Out in Windows 11

Work through these fixes in order. Check Smart App Control after each one and stop when it works.

Fix 1: Check the State and Windows Version

1. Open Settings > Privacy & security > Windows Security > App & browser control.

2. Select Smart App Control settings. The page shows On, Evaluation or Off.

3. Press Win + R, type winver and press Enter to see your version.

Microsoft’s documentation describes On as enforcement mode, Evaluation as a trial mode, and Off as not running. If while in evaluation mode smart app control encounters anything that it has blocked (like some developers or corporate) tasks; then it may turn Smart App Control off for you.

Fix 2: Install the Latest Windows Updates

1. Open Settings > Windows Update.

2. Select Check for updates, install everything and restart.

There are Two articles which report Microsoft issued their April 2026 cumulative update kb5083769. This cumulative update apparently changed what was previously required by the previous version of windows, and now allows you to use the toggle without having to do reinstall. So if you missed this update, installing it could give you access to the toggle.

Fix 3: Apply Microsoft’s Workaround for KB5127648

Microsoft released KB5127648 on October 13, 2026 for Windows 11 24H2, 25H2 and 26H2. According to PCWorld, PCs where Smart App Control was already on stay protected, but if you turn it off, you cannot turn it back on. There is no permanent fix yet, and Microsoft has not announced a date.

Back up the registry first. Then:

1. Type cmd in Search and choose Run as administrator.

2. Run these two commands, as published by Microsoft and reported by BleepingComputer:

reg add
“HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2883193997 /t REG_DWORD /d 1 /f
reg add
“HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides” /v 2850574478 /t REG_DWORD /d 1 /f

3. Restart the machine & check on Smart App Control again.

Fix 4: Set the Smart App Control Registry Value

A Microsoft Q&A moderator suggested another workaround in January 2026: setting the VerifiedAndReputablePolicyState value, which Guiding Tech also lists.

1. Press Win + R, type regedit and press Ctrl + Shift + Enter.


2. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy.
3. Create or edit the DWORD VerifiedAndReputablePolicyState. Set 0 for Off, 1 for On or 2 for Evaluation.

4. Reboot your machine & try again.

Guiding Tech warns that Windows may ignore or reset the change on upgraded installs. Treat it as a second attempt, not a guaranteed fix.

Fix 5: Check for a Work or School Policy

If your PC is managed by an organisation, a policy may disable the feature. Ask your IT team before changing anything.

Fix 6: Reset Windows as a Last Resort

In addition, Windows Central points out that with some of the older versions of windows, you may have had to perform either a reset or clean install on the operating system to allow the feature to function. As indicated earlier you can try resetting Windows by going to settings > system > recovery > reset this pc. However, prior to doing so, please ensure that all of your personal data has been backed-up. Try this only after the steps above, since newer builds should not need it.

What If Smart App Control Blocks an App You Trust?

 Smart App Control has no per-app “Run anyway” option, and Topedia notes it may block installers that use Windows Installer Transform (MST) files, which cannot be digitally signed. Windows Latest describes the newer routine: turn it off in Windows Security, install the app, then turn it back on. Given the KB5127648 issue, you may not be able to turn it back on, so check your options before you turn it off.

Is Your PC Safe With Smart App Control Off?

Microsoft Defender and SmartScreen keep running when Smart App Control is off. PCWorld warns that you lose a layer of protection against unknown apps. Keep Defender on, download only from trusted sources and install updates promptly.

Frequently Asked Questions

Why is Smart App Control grayed out (or greyed out) in Windows 11?

The common causes are the KB5127648 update, an older clean-install requirement, Windows 10 or an old build, or a work policy.

Can I turn Smart App Control back on after turning it off

On newer builds, yes. If you do not have a new build then you need to reset it. The October 2026 update may block it, so use Microsoft's workaround.

Does Smart App Control need a clean install?

It did on 22H2. Two reports say the April 2026 update removed that requirement.

What is Smart App Control evaluation mode?

A trial mode in which Windows learns whether Smart App Control suits how you use your PC, then turns it on or off.

Is Smart App Control available on Windows 10?

No. It is a Windows 11 feature, available from 22H2.

Is it safe to edit the registry for this?

It is a risk. Back up the registry first and use only Microsoft's published values.

Will resetting Windows fix it?

It can on older builds, but try updates and the workaround first.

Do I need Smart App Control if I have Microsoft Defender?

Defender stays on either way. Smart App Control adds a stricter block on unknown and unsigned apps.

Conclusion

Smart App Control grayed out usually has a cause you can name: an old Windows build, an earlier shut-off, a policy, or the October 2026 KB5127648 bug. Check your state and version, install updates, and use Microsoft’s workaround if the update is installed. Only Reset Windows as a last option.

Leave a comment