In Windows 11, Smart Application Control Protection is improved but not for everyone

In Windows 11, Smart Application Control Protection is improved but not for everyone


This year Microsoft launched the “Smart App Control” security feature for Windows 11. It was billed as a protection tool that “blocks untrusted and potentially dangerous apps.”

This “Smart Software Control” is interesting as it is a kind of new shield against certain threats. According to the giant, this is protection against potentially dangerous programs and files depending on their nature. To find it you will have to go to this address

Paramètres > Confidentialité et sécurité > Sécurité Windows

This “Smart App Control” will appear with the already existing security as

  • Basic reputation protection,
  • Unique Navigation,
  • And use protection

Usually its activation is automatic on new installations of Windows 11. Otherwise, it is necessary to intervene manually. Microsoft recently released an update. The information comes from a Tweet from David Weston, Microsoft’s vice president for enterprise security and operating systems. Smart Software Control automatically blocks specific file types if they come from the Internet.

We get a restriction on the execution of Office files and macros, as long as they come from the Internet. Microsoft plans to update its documentation which lacks information and clarity on all of this. Sleep Computer however, it managed to get its hands on the list of file extensions that Smart App Control blocks by default. In addition to iso and lnk, we get the extensions IMG, VHD, VHDX, .appref-ms, BAT, CMD, CHM, CPL, JS, JSE, MSC, MSP, REG, VBE, VBS and WSF. Blocking is usually only done if the nature of these different file types is questionable.

Only some Windows 11 users have access to Smart Application Control. Even on a fresh installation, Smart App Control may choose to disable itself during the testing phase. In this case, it will not be possible to turn it on.