Windows 11 KB5074105 Removes Major Limitation From Smart App Control

The Windows 11 KB5074105 update already stood out for fixing a long-standing File Explorer freeze that could leave systems without a taskbar at first login. However, Microsoft also used this release to quietly improve one of Windows 11’s built-in security features.

Windows 11 includes Smart App Control (SAC), a protection mechanism designed to block untrusted or potentially malicious applications before they can run. Instead of detecting threats after execution, SAC evaluates an app at launch and allows it to run only if it meets Microsoft’s trust criteria.

While effective, Smart App Control has drawn criticism for false positives. In some cases, legitimate software was blocked, forcing users to disable the feature entirely. One reported example involved the ASUS Armory Crate on the Xbox Ally, where the only available workaround required turning off SAC.

Smart App Control is no longer a one-way switch in KB5074105

Until recently, disabling Smart App Control came with a major drawback. Once turned off, users could not re-enable it without reinstalling Windows 11, based on Microsoft’s assumption that the system could no longer be fully trusted.

As Neowin reports, Microsoft has now changed this behavior in recent Windows 11 updates for versions 24H2 and 25H2. With KB5074105, users can re-enable Smart App Control without reinstalling the operating system, a capability Microsoft began testing back in December.

Smart App Control can now be toggled directly from Windows Security > App & Browser Control > Smart App Control, giving users far more flexibility than before.

Microsoft still advises keeping Smart App Control enabled in most situations, as it provides an extra layer of protection against untrusted applications. However, the ability to turn it back on after disabling it makes the feature far more practical for users who occasionally need to run trusted software that Windows may incorrectly flag.

Overall, this change makes Smart App Control less restrictive while preserving its security benefits, adding another meaningful improvement to the KB5074105 update.

Despite the improvements, some issues still remain, and Microsoft confirmed that shutdown bugs still affect Secure Launch and VSM PCs, but the fix is on the way.