Smart App Control in Windows 11

Smart App Control, (SAC), is blocking the autorun.exe

🛡️ Starting in Windows 11 version 22H2, Smart App Control, (SAC), brings robust application control to consumers and to some small businesses with simpler app portfolios.

Smart App Control ensures only signed code runs or code predicted to be safe by our intelligent cloud-powered security service.

Wow, this is way to techy for me, what does this mean?

OK, we totally understand, and in complete honesty, this is a moving target just now.

As of the time of writing this article, (June '26), this is only the second time we have had a query around this new Windows setting.

ℹ️ Please also understand, if you run a third party anti-virus or security program, you may already have protection through that particular non-Microsoft subscription software.

So exactly what is SAC?

Smart App Control is Microsoft's attempt to deal with ''malware''. Malware is any executable code that can potentially damage or destroy the operating platform, or instals software that transmits your personal or financial details, to an unknown bad actor.

On paper this is a brilliant innovation, and protects the user from harm to their device or losing personal data.... however!

The downside!

As things stand, this is a bit of a blunt tool! Even in 'Evaluation Mode' the program blocks everything that currently does not appear on the Microsoft certificated list.

Why is this an issue?

ℹ️The Crafty Witches would never release a title with any harmful content, but regardless of what safeguards we have in place the application will still block it.

As an independent developer, we use a commercial program to create our 'autorun.exe' graphics user interface, (GUI). This program doesn't natively carry Microsoft certification, so if we, as the publisher, were to even attempt to get certification from Microsoft, it would both exponentially increase the cost of our products to an unreasonable, and importantly unaffordable level, and also make the lead time for each of the titles become infinitum, leaving large gaps between releases.

All in all the value for money to you the customer wouldn't be realistic.

So what is the option?

As things stand, the application currently is either set to 'Evaluation' or 'Off', and if we were to be cynical, it's in Microsoft's interest to leave this as is, as it 'forces' developers to engage in the certification process.

Multiple online help centres, suggest that this is going to be a 'user editable control' going forward, however at present if you switch it off, you can only reactivate the setting by reinstalling Windows

Similarly it is suggested that in the 'Evaluation Mode' it will eventually build it's own trusted databases, however this will take time.

So what to do?

It's going to be entirely up to the individual whether you wish to switch the setting off, and multiple scenarios will need to be considered, such as, and not limited to;

the amount of users on the device
the technical ability of the users who engage with executable files
the use of the device, (if this is a business machine, your IT admin team may not allow you to change settings)

ℹ️Remember that even if you leave the setting 'On' or at least 'Evaluation', you can still access the printable artwork by navigating to 'Autoplay' folder, then 'Docs', it''s just the autorun interface you are talking about being blocked.