Microsoft Smart App Control Disabled by October 2026 Windows Update, Fixed in November Patch
What Happened — An October 2026 Windows 11 security update (KB5127648) unintentionally grayed‑out the Smart App Control toggle in the Windows Security app, preventing administrators and users from enabling the feature on affected devices. Smart App Control leverages code‑integrity and app‑intelligence services to block untrusted binaries, complementing SmartScreen and Microsoft Defender. Devices that already had the control enabled remained protected; only those with it turned off were impacted. Microsoft released a corrective preview update (KB5127936) on Nov 2 2026 and provided a registry‑based workaround and Group‑Policy settings for enterprises that could not immediately apply the preview.
Why It Matters for Trust & Control Assurance — The incident highlights the need for continuous verification that security controls stay enabled after OS updates, a core control‑area for configuration management and baseline enforcement.
Who Is Affected — Enterprises and individual users running Windows 11 24H2 or later, across all industries that rely on Microsoft Windows as a primary endpoint OS.
Recommended Actions –
- Verify the Smart App Control status on all Windows 11 endpoints; re‑enable where disabled.
- Deploy the KB5127936 preview or the next cumulative Patch Tuesday update.
- Apply the published registry or Group‑Policy work‑arounds on managed devices pending the update.
- Update your configuration‑baseline documentation to include Smart App Control as a required control and schedule periodic compliance checks.
Technical Notes – The issue stemmed from a regression in the KB5127648 update that prevented the Smart App Control UI element from being rendered when the feature was previously off. No CVE was assigned; the problem was a software‑update misconfiguration rather than an exploitable vulnerability. Source: BleepingComputer