What is Smart App Control in Windows 11

How does this impact me?

Devices with the Windows 11 May CI will automatically assess if SAC is enforced on the device. The assessment is automatically generated with the support of Microsoft AI. If SAC is enforced, all binaries are automatically scanned for a confidence assessment like a file scan by an anti-virus engine.

If SAC is enforced, Windows 11 notifies the user with a toast message.

SAC is initially only available on devices purchased in North America and Europe, the Middle East, and Africa (EMEA).

SAC is only enabled after a clean installation of Windows 11.

How do I know if an app is blocked from execution?

SAC notifies the user through a toast notification when an app is blocked.

How can I review and change the list of apps being blocked by SAC?

You can find the settings for SAC in the App and Browser control panel of the Windows Security app. The fastest way to access these settings is:

1. Click the Start button in Windows.
2. Type SAC in the search box.
3. Select the SAC system settings from the results.

The Windows search box with SAC entered and the SAC settings as the top result.

For more information, see What is Smart App Control? - Microsoft Support.

How can I manage SAC in managed environments?

See Application Control for Windows | Microsoft Learn.