Smart App Control Greyed Out: How to Fix It

If the Smart App Control toggle is greyed out in Windows Security, you can usually fix it by resetting the Windows Security app or using a registry edit, but the exact steps depend on why it’s locked. This guide explains the causes and walks through the fixes that work for most people.

What Smart App Control Is and Why It Gets Greyed Out

Smart App Control (SAC) is a Windows security feature that blocks untrusted or potentially malicious apps from running. It was introduced in Windows 11 22H2 and is enabled by default on clean installs. When the toggle is greyed out, it means the feature is either already on, already off, or Windows has locked it because changing it could compromise security.

The most common reason the toggle is greyed out is that SAC is in “Evaluation” mode. In this mode, Windows monitors how you use apps for a while, then decides whether to turn SAC on or off automatically. During evaluation, the toggle is disabled to prevent you from accidentally turning it off. Another common cause is that SAC was turned off manually—once off, you can’t turn it back on without reinstalling Windows. Finally, a corrupted Windows Security app or a pending update can also grey out the toggle.

Before You Start: Check Your Windows Version

Smart App Control is only available on Windows 11 22H2 and later. If you’re on Windows 10 or an older Windows 11 build, you won’t see the toggle at all—or it will be greyed out permanently. To check your version, press Win + R, type winver, and press Enter. If you see “22H2” or higher, you’re good. If not, run Windows Update first.

Also note that SAC only works on devices that meet certain hardware requirements, like having a TPM 2.0 chip. If your PC doesn’t meet these, the toggle will be greyed out and you can’t enable it. In that case, the only fix is to upgrade your hardware or reinstall Windows on a compatible device.

Fix 1: Turn Off the Toggle in Windows Security (If It’s Not Greyed Out)

If the toggle is not greyed out but you want to turn SAC off, here’s how:

1. Open Windows Security (search for it in the Start menu).
2. Go to App & browser control.
3. Click on Smart App Control settings.
4. Select Off.

If the toggle is greyed out, skip to the next fixes.

Fix 2: Reset Windows Security App

A corrupted Windows Security app can cause the toggle to appear greyed out even when it shouldn’t be. Resetting the app often restores the toggle to its normal state.

1. Press Win + I to open Settings.
2. Go to Apps > Installed apps.
3. Search for Windows Security.
4. Click the three-dot menu next to it and select Advanced options.
5. Scroll down and click Reset. Confirm if prompted.

After the reset, restart your PC and check if the toggle is now clickable. If not, try the registry method below.

Fix 3: Use Registry Editor to Force Enable/Disable

If the toggle is greyed out because SAC is in Evaluation mode, you can use the registry to change its state manually. This is a more advanced fix, so back up your registry first (File > Export) before proceeding.

1. Press Win + R, type regedit, and press Enter.
2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy.
3. Look for a DWORD called VerifiedAndReputablePolicyState.
4. If it doesn’t exist, right-click on the right pane, select New > DWORD (32-bit) Value, and name it VerifiedAndReputablePolicyState.
5. Set the value to one of these:
   • 0 = Off (SAC disabled)
   • 1 = On (SAC enabled)
   • 2 = Evaluation mode (default)
6. Click OK and restart your PC.

After restart, check Windows Security. The toggle should reflect your chosen state and no longer be greyed out. If you set it to 0, SAC is off and you can’t turn it back on without reinstalling Windows—so choose carefully.

Fix 4: Reinstall Windows (Last Resort)

If you previously turned SAC off and now want it back on, the only official way is to reinstall Windows. This is because Microsoft designed SAC to be irreversible once disabled, to prevent malware from disabling it. You can do a clean install using the Media Creation Tool, but back up your files first. Alternatively, you can use the “Reset this PC” feature in Settings, which reinstalls Windows while keeping your files (though it’s not guaranteed to work for SAC).

Before reinstalling, double-check that you really need SAC. If you just want to run a specific app that’s being blocked, you might be able to allow it through the “Allow an app through Smart App Control” option in the same settings page—though this option is also limited.

Common Problems and Misconceptions

One common misconception is that Smart App Control is the same as Microsoft Defender SmartScreen. They are related but different: SmartScreen is a web filter, while SAC blocks apps at the system level. Another misconception is that turning off SAC will make your PC faster—in reality, SAC has minimal performance impact.

If the toggle is greyed out and you’re in Evaluation mode, you might see a message saying “Smart App Control is evaluating how this device is used.” This is normal and can last for a few days. During this time, you can’t change the setting. If you want to speed up the evaluation, just use your PC normally—install apps, browse the web, etc. After a while, Windows will make a decision and enable or disable SAC automatically.

Another issue is that SAC can be greyed out if you have a group policy that manages it. If your PC is managed by an organization, the policy might override the toggle. In that case, you’ll need to contact your IT admin. You can check by running gpedit.msc (Pro/Enterprise only) and looking under Computer Configuration > Administrative Templates > Windows Components > Windows Security > App and browser protection.

Frequently Asked Questions

Can I turn Smart App Control back on after turning it off?

No, once you turn it off, you can’t turn it back on without reinstalling Windows. This is a deliberate design choice to prevent malware from disabling it. If you need SAC back, you’ll have to do a clean install of Windows.

Why is Smart App Control greyed out on my new PC?

On a new PC, SAC is usually in Evaluation mode, which greys out the toggle. This is normal and lasts for a few days while Windows learns your app usage. After evaluation, the toggle will either be enabled (if you’re using trusted apps) or turned off permanently.

Does Smart App Control block all unknown apps?

No, it only blocks apps that are untrusted or have no reputation. Apps signed with a valid certificate from a known publisher are usually allowed. If an app is blocked, you can try to allow it by clicking “Allow” in the notification, but only if you’re sure it’s safe.

Is Smart App Control available on Windows 10?

No, Smart App Control is only available on Windows 11 22H2 and later. Windows 10 uses SmartScreen, which is a different feature. If you’re on Windows 10, you won’t see the SAC toggle at all.

Will resetting Windows Security delete my files?

No, resetting the Windows Security app only resets its settings and cache. It doesn’t affect your personal files. However, if you use the “Reset this PC” feature to reinstall Windows, you can choose to keep your files, but it’s always best to back up important data first.

Related

• Oculus Air Link Not Working on Windows? Fixes
• Windows 10 Can’t Detect Hard Drive? Fixes That Work
• Mac Restart Problem? Fix the Error