Microsoft has fixed a Smart App Control issue that prevented some Windows 11 users from enabling the security feature. The problem followed the October 2026 KB5127648 security update and affected devices running Windows 11 version 24H2 and later.
Update Left the Security Setting Unavailable
On affected computers, Windows Security displayed a greyed-out option for enabling the feature. Users who had previously switched it off could therefore find themselves unable to reactivate it. However, Microsoft said devices with the protection already enabled remained unaffected and continued to receive protection.
Smart App Control helps block potentially harmful applications and binaries through Microsoft’s code integrity technology and app intelligence services. It operates alongside SmartScreen and Microsoft Defender as part of Windows’ security protections. Consequently, the bug affected access to a specific security setting rather than disabling every Windows protection.
Microsoft acknowledged the problem in October and documented it in the KB5127648 advisory. The company subsequently confirmed a correction in updates released on October 28, 2026, and later. That includes the KB5127936 optional preview update.
Smart App Control Fix Arrives in Preview Update
Installing KB5127936 resolves the activation problem on affected devices, according to Microsoft. The company also recommends installing the latest available security update because cumulative releases include previous improvements and corrections. This allows users to obtain the fix through a later applicable update as well.
However, organisations may prefer to wait for the November Patch Tuesday cumulative updates instead of deploying an optional preview. Microsoft has therefore provided temporary administrative workarounds. These alternatives address the unavailable setting while allowing IT teams to follow their existing update schedules.
The correction specifically concerns devices that cannot turn the feature back on after the October update. Meanwhile, users whose protection remained enabled do not face the same activation issue. That distinction limits the scope of the reported problem.
Administrators Can Apply Temporary Workarounds
One workaround involves running two registry commands from an elevated Command Prompt. These commands configure feature-management overrides on the affected computer. Administrators must then restart the device before attempting to enable the protection again.
Microsoft also supplied Group Policy packages for Windows 11 versions 24H2, 25H2 and 26H2. The policies enable the security feature and provide logging for troubleshooting. As with the registry approach, applying the policy changes requires a restart.
After installing the packages, administrators must locate the relevant settings under Computer Configuration and Administrative Templates. They then need to set those policies to Enabled. Simply installing the packages does not complete the configuration process.
Preview Release Also Addresses Connectivity Problems
The KB5127936 preview update includes fixes for other problems introduced by recent Windows updates. Among them are Remote Desktop failures that occur when the Administrator protection feature is enabled. Additionally, the release addresses Always On VPN issues linked to the September 2026 cumulative updates.
Together, these corrections cover both security configuration and remote connectivity. For affected organisations, the preview offers an earlier route to those fixes. Alternatively, administrators can use the temporary workaround for Smart App Control while awaiting the subsequent cumulative security release.
0 responses to “Smart App Control: Microsoft Fixes Windows Update Bug”