Microsoft warns October Windows update may prevent users from enabling Smart App Control
Summary
Microsoft says KB5127648 may prevent users on affected Windows 11 devices from enabling Smart App Control. No fix is available; Microsoft shared registry and Group Policy workarounds for administrators.
Key points
- The issue affects some devices running Windows 11 version 24H2 and later after installing KB5127648.
- Smart App Control may appear grayed out if it was turned off before the update; devices where it was already enabled remain protected.
- Microsoft has not released a fix and recommends temporary registry or Group Policy workarounds for affected enterprise-managed devices.
- The Group Policy workaround requires enabling both specified settings and restarting affected devices.
Article Details
- Affected Versions
- Windows 11 version 24H2
- Windows 11 version 25H2
- Windows 11 version 26H2
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- unavailable
- Workarounds
- On affected enterprise-managed devices, add registry DWORD values 2883193997 and 2850574478 under HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides, each set to 1, then restart.
- Install and configure both specified Group Policies, set both settings to Enabled, and restart the affected devices.
People
Vendors
Products
Microsoft Defender Antimalware Platformthat uses Microsoft's app intelligence services and code integrity features and works alongside Microsoft Defender and SmartScreen to block potentially harmful apps or binaries.Microsoft Defender SmartScreenapp intelligence services and code integrity features and works alongside Microsoft Defender and SmartScreen to block potentially harmful apps or binaries.Smart App ControlMicrosoft: October Windows update may break Smart App ControlWindows 11Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update.