Windows 10: Microsoft improves Windows 11's Smart App Control, but you may not be able to use it

The Windows 11 Security feature Smart App Control was unveiled earlier this year by Microsoft. Back then, Microsoft described it as a protective tool that "blocks untrusted or potentially dangerous applications".



What made the tool unique at the time was that it determined whether it should run on a Windows 11 device or not. Smart App Control runs in evaluation mode in the beginning; it is in this mode that the app determines whether it should be turned on.

Microsoft did reveal that users could enable Smart App Control in the App & Browser Control section of the Windows Security application. Smart App Control is activated on new Windows 11 installs only according to Microsoft.

Microsoft updated Smart App Control recently, according to a message on Twitter by David Weston, Microsoft's VP for Enterprise and OS Security. According to Weston, Smart App Control is blocking specific file types automatically if they come from the Internet.

Windows 11 with smart app control blocks iso and lnk files that have mark of the web just like Macros.
​

The protective feature copies the protections that Microsoft implemented recently to block the execution of Office files with macros, provided that the Office files came from the Internet zone.



Microsoft plans to update the documentation, which lacks information and clarity. Bleeping Computer got their hands on an extended list of file extensions that Smart App Control blocks by default. Besides iso and lnk, Smart App Control appears to block IMG, VHD, VHDX, .appref-ms, BAT, CMD, CHM, CPL, JS, JSE, MSC, MSP, REG, VBE, VBS and WSF files, provided that they come from an unsafe location.

Smart App Control displays the following message on the screen if it blocked the execution of a file on the Windows 11 machine:

Smart App Control blocked an app that may be unsafe.

This file was blocked because files of this type from the internet can be dangerous.
​

Smart App Control: Only for new installs and reset devices


The main caveat when it comes to Smart App Control is that it is only ever active on new installs or machines that have just been reset. Apparently, Microsoft added the limitation to Smart App Control to ensure that no malicious apps or programs are already running on the device.

Only some Windows 11 users will have access to Smart App Control. Even on new installs, Smart App Control may decide to turn itself off during the evaluation phase. In that case, users have no option to turn it on once it has been turned off.

Now You: what is your take on Smart App Control and the extensions that it blocks automatically?

Thank you for being a Ghacks reader. The post Microsoft improves Windows 11's Smart App Control, but you may not be able to use it appeared first on gHacks Technology News.

read more...

 

Smart App Control

Hi Taylor. I'm Greg, 10 years awarded Windows MVP, specializing in Installation, Performance, Troubleshooting and Activation, here to help you.

You can turn off Smart App Control as shown here:

https://websiteforstudents.com/how-to-turn-on-o...

https://www.ghacks.net/2022/03/07/smart-app-con...

For guidance on how Microsoft screens apps for Smart App Control see here:

https://support.microsoft.com/en-gb/topic/what-...

Feel free to ask back any questions. Based on the results you post back I may have other suggestions if necessary.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

 

Smart App Control, Does It Work On Windows 11 Beta?

Hello Red,

Smart App Control is available starting with Windows 11 build 22567.

Smart App Control starts in evaluation mode. This is a period during which Windows tries to determine if you're a good candidate for Smart App Control. If you are a good candidate for Smart App Control, then it will automatically be turned on. If not, it'll be turned off.

If Smart App Control is turned off, then you will need to either reset or clean install Windows 11 to get it back to evaluation mode, then manually turn it on.

The tutorial below can help provide more details if needed.

Turn On or Off Smart App Control in Windows 11 Tutorial

 

Smart App Control





So I used Visual Studio to create simple Windows apps that will automate my work, and most of these consist of less than 1,000 lines of code.

I also made an app for my cousin that makes it easier for them to design menus and social media posters for their bakeshop, with few clicks. My apps were blocked right away by Windows 10's Smart Screen, but that's something that you can work your way around with.

But with Windows 11's implementation of Smart App Control, the only way to run my apps is by signing them.

And should I be worried about my apps getting blocked by Smart App Control? Does it block all unsigned apps?
Will it block programs that I debug in VS?
If yes, how can I use my own apps on my work computer running Windows 11?
I think Smart App Control is beneficial to those who don't know what they are doing on Windows; but for technical users; it will only get in our way.
For users who open, download, and double-click any malicious, executable attachment disguised as a Word document, Smart App Control is for them.