You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: hub/apps/develop/smart-app-control/overview.md
+15-12Lines changed: 15 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,33 +1,36 @@
1
1
---
2
2
title: Smart App Control
3
-
description: Overview of Smart App Control
4
-
ms.topic: article
5
-
ms.date: 09/20/2022
3
+
description: Overview of Smart App Control, a Windows feature that protects users from untrusted or potentially dangerous code.
4
+
ms.topic: concept-article
5
+
ms.date: 07/15/2025
6
+
# customer intent: As a Windows developer, I want to understand how Smart App Control works so that I can ensure my apps are compatible and secure.
6
7
---
7
8
8
-
# Smart App Control
9
+
# Smart App Control overview
9
10
10
-
Smart App Control is a new app execution control feature that combines Microsoft’s app intelligence services and Windows' code integrity features to protect users from untrusted or potentially dangerous code. Smart App Control selectively allows apps and binaries to run only if they're likely to be safe. Microsoft's app intelligence services provide safety predictions for many popular apps. If the app intelligence service is unable to make a prediction, then Smart App Control will still allow an app to run if it is signed with a certificate issued by a certificate authority (CA) within the Trusted Root Program.
11
+
Smart App Control is an app execution control feature that combines Microsoft’s app intelligence services and Windows' code integrity features to protect users from untrusted or potentially dangerous code. Smart App Control selectively allows apps and binaries to run only if they're likely to be safe. Microsoft's app intelligence services provide safety predictions for many popular apps. If the app intelligence service is unable to make a prediction, then Smart App Control will still allow an app to run if it is signed with a certificate issued by a certificate authority (CA) within the Trusted Root Program.
11
12
12
13
Malware, Potentially Unwanted Apps (PUA), and unknown, unsigned code are blocked by default.
13
14
14
15
## Smart App Control requirements
15
16
16
-
Smart App Control is designed to protect a device for its entire lifetime. As such, it can only be enabled on a clean install of a version of Windows that contains the Smart App Control feature. Additionally, Smart App Control is only enabled in certain regions. We hope to roll out additional regions soon.
17
+
Smart App Control is designed to protect a device for its entire lifetime. As such, it can only be enabled on a clean install of a version of Windows that contains the Smart App Control feature. Additionally, Smart App Control is only enabled in certain regions. This feature is expected to roll out to additional regions soon.
17
18
18
19
- Windows 11, version 22572 or higher,
19
20
- A clean Windows install,
20
-
> [!NOTE]
21
-
> [Resetting your device](/windows-hardware/service/desktop/resetting-the-pc) counts as a clean Windows install.
21
+
22
+
> [!NOTE]
23
+
> [Resetting your device](/windows-hardware/service/desktop/resetting-the-pc) counts as a clean Windows install.
24
+
22
25
- North America or Europe
23
26
24
27
## Smart App Control stages
25
28
26
-
Smart App Control can be running in either*evaluation mode* or *enforcement mode*.
29
+
Smart App Control can either run in *evaluation mode* or *enforcement mode*.
27
30
28
-
In *evaluation mode*, Smart App Control runs in the background, observing activity on the device. During this time, Smart App Control is evaluating whether the device is a good fit for the protection it offers based the variety of apps installed and used on the device.
31
+
In *evaluation mode*, Smart App Control runs in the background, observing activity on the device. During this time, Smart App Control is evaluating whether the device is a good fit for the protection it offers based on the variety of apps installed and used on the device.
29
32
30
-
In *enforcement mode*, Smart App Control is actively protecting your device. Apps cannot be run unless they are recognized by Microsoft's app intelligence services, or signed with a trusted certificate.
33
+
In *enforcement mode*, Smart App Control is actively protecting your device. Apps cannot be run unless they are recognized by Microsoft's app intelligence services, or they are signed with a trusted certificate.
31
34
32
35
## Frequently Asked Questions
33
36
@@ -53,6 +56,6 @@ Smart App Control allows apps and binaries to run only if they're likely to be s
53
56
54
57
Note that some older Microsoft binaries are considered unsafe because attackers can potentially use them to gain unauthorized access. For a complete list of these files, please see [Application Control for Windows](/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control#smart-app-control-enforced-blocks).
55
58
56
-
## Further information
59
+
## Related content
57
60
58
61
-[What is Smart App Control?](https://support.microsoft.com/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003)
0 commit comments