Microsoft has confirmed that the October KB5127648 security update for Windows 11 can prevent some users from turning on Smart App Control, according to an update to the official KB5127648 support document.
On affected devices running Windows 11 version 24H2 and later, the Smart App Control option in the Windows Security app is grayed out and cannot be toggled.
A permanent fix is not available yet. Microsoft has published two temporary workarounds, one based on the registry and one based on Group Policy, aimed mainly at IT administrators who manage enterprise devices.
Which Windows 11 Devices Are Affected by the Smart App Control Bug
Smart App Control is a Windows 11 security feature that uses Microsoft's app intelligence services and code integrity features. It works alongside Microsoft Defender and SmartScreen to block apps or binaries that may be harmful.
The problem only hits systems where the feature was switched off before the update. "After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off," Microsoft says in the advisory. The company adds that devices where Smart App Control is already turned on are not affected and remain protected.
Users who never planned to enable Smart App Control will not notice any change. The bug matters for anyone who wants to switch the protection on after installing the October update, a step that is blocked on affected systems.
Microsoft's Registry and Group Policy Workarounds
Microsoft's registry workaround restores the toggle on affected devices. It requires administrator rights and a restart:
- Type cmd in the Windows Search box.
- Select Run as Administrator to open an elevated Command Prompt window.
- Enter reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2883193997 /t REG_DWORD /d 1 /f and press Enter.
- Enter reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2850574478 /t REG_DWORD /d 1 /f and press Enter.
- Restart the device, then open the Windows Security app and turn on Smart App Control.
Administrators of managed fleets can install two Group Policy packages instead. Microsoft lists them as KB5074105 261015_19222 Feature Preview and KB5074105 261015_19221 Feature Preview, both covering Windows 11 versions 24H2, 25H2, and 26H2.
Once installed, the policies appear under Computer Configuration, Administrative Templates, the Group Policy name, and then Windows 11, version 24H2, 25H2.
Both settings must be set to Enabled, and the affected devices need a restart before the change applies. The policies also turn on logging for troubleshooting.
The Smart App Control issue is the latest in a series of confirmed problems with recent Windows 11 updates. Earlier this week, Microsoft also resolved a separate bug behind black screens and Explorer crashes after sign-in, and it acknowledged Remote Desktop failures for non-admin users when the Administrator protection feature is enabled.
Microsoft has not said when a fix for the Smart App Control toggle will ship, and the registry and Group Policy changes remain temporary measures until that update arrives.
Thank you for being a Ghacks reader. The post Microsoft Confirms Windows 11 KB5127648 Update Can Block Users From Turning On Smart App Control appeared first on gHacks.
0 Commentaires