Skip to content
TroubleGrid

Smart App Control is blocking a game, launcher or mod

Last verified August 2026Tested against Windows 11 build 22572 and later, Windows 11 24H2, Windows 11 25H2Good evidence

Smart App Control blocks unknown unsigned code by default, which is exactly what a lot of mods, mod loaders, older launchers and hardware utilities are. Before you turn it off, find out what it actually blocked — Windows records it under Protection history. Turning it off is the one step here you may not be able to undo: Microsoft's developer documentation says it can only be enabled on a clean install, while its consumer FAQ says recent updates allow re-enabling from Windows Security. Those two pages disagree, so check your own toggle before you rely on either.

This feature is different from the rest of Windows Security in a way worth understanding before you touch it. It is not a scanner that flags things it recognises as bad — it is an allowlist that runs code only if Microsoft's service predicts it is safe or it carries a certificate from a trusted authority. Anything niche, anything unsigned, and anything a small team ships without code signing falls outside that by default, whether or not it is dangerous.

Symptoms

  • A pop-up saying Smart App Control has blocked part of this app
  • A game launches but a specific feature — an overlay, anti-cheat module, mod loader or hardware plugin — does nothing
  • An installer closes immediately with no error
  • A mod manager or trainer disappears the moment you run it
  • A driver from a peripheral utility refuses to load
  • It started right after a clean install or a reset, or after a toast notification about enforcement mode

Why this happens

The file is unsigned, and unsigned is the default block

Smart App Control allows apps and binaries only when they are likely to be safe. Malware, potentially unwanted apps and unknown unsigned code are blocked by default. Where the prediction service has no opinion, a certificate from a certificate authority in the Trusted Root Program is what gets a file through. Community mods, small utilities and older tools frequently have neither — the prediction service has never seen them, and nobody paid for a signing certificate.

Find out exactly what was blocked · Get a signed build, or the file from its real source

The app runs, but one of its components does not

The most confusing version of this is when nothing appears broken at first. Microsoft's own description of the message is that an app, service or piece of hardware tried to load a driver or file that is not properly signed, and that only that file stops working — the rest of the application carries on. That is why a game can launch normally with its overlay, capture or peripheral integration silently dead.

Find out exactly what was blocked

Enforcement mode turned itself on

Smart App Control starts in evaluation mode, watching what you install and run without blocking anything, and decides whether the machine is a good fit. Microsoft says it turns itself on in most cases, and turns itself off for users whose normal work it would interrupt — developers and corporate users are the examples given. You get a toast notification when it enters enforcement mode, which is easy to dismiss and forget about weeks before the first thing breaks.

Check which mode Smart App Control is in

An installer uses files that cannot be signed at all

Windows Installer Transform files cannot currently be digitally signed. Microsoft acknowledges that when no confident cloud reputation verdict is available for them, the result can be a block — and its own suggestion in that case is to disable Smart App Control temporarily to complete the install.

Turn Smart App Control off

Fixes

Find out exactly what was blocked

about 5 min

Every decision after this depends on whether the blocked file is something you trust. Guessing is how people end up disabling a security feature over a file they would not have run anyway.

Applies to: Windows 11 build 22572 and later

  1. If the pop-up is still on screen, select Learn more. It names the driver or file that was blocked.
  2. If it has gone, open Windows Security > Virus & threat protection > Protection history and search the entries for Smart App Control or Blocked app.
  3. Look at where the blocked file came from. A file inside a game you installed from Steam or the publisher's own installer is a different proposition from one that arrived with a mod pack from a file host.
  4. If you do not recognise it, stop. A block on something you cannot account for is the feature doing its job, and the answer is not to switch the feature off.

Confirmed by the vendor.

Source: Microsoft

Check which mode Smart App Control is in

about 3 min

Evaluation mode does not block anything, so if you are in it, this is not your problem at all.

Applies to: Windows 11 build 22572 and later

  1. Open Windows Security > App & browser control and find the Smart App Control section. If there is no such section, the feature is not on this device and you can stop here.
  2. On means enforcement mode — it is actively blocking. Evaluation means it is observing without blocking. Off means it is not running.
  3. If it says Evaluation and something is still being blocked, the block came from somewhere else: Microsoft Defender, SmartScreen, memory integrity, or the game's own anti-cheat. Check Protection history to see which.
  4. Note whether this machine was recently reset or clean installed. Smart App Control starts in evaluation mode after a clean install and may have switched itself to enforcement since.

Confirmed by the vendor.

Source: Microsoft

Get a signed build, or the file from its real source

about 20 min

A properly signed file is allowed through even when Microsoft's prediction service has no opinion on it. This solves the problem without weakening anything.

Applies to: Windows 11 build 22572 and later

  1. Re-download the tool from the developer's own site or repository rather than a mirror or aggregator. Repackaged copies lose the original signature.
  2. Check for a newer release. Projects that get caught by this often ship a signed build afterwards precisely because of the complaints.
  3. For peripheral and RGB utilities, install the manufacturer's current package rather than an old one you already had — the old driver inside it is usually what triggers the block.
  4. If the project has no signed build, report it to them. There is nothing you can configure on your side that makes an unsigned binary acceptable to this feature.

Confirmed by the vendor.

Source: Microsoft

Turn Smart App Control off

Check before applyingabout 10 min

Microsoft itself suggests this for installers that use files which cannot be signed. It is also the step you may not be able to reverse, so treat it accordingly.

Applies to: Windows 11 build 22572 and later

Before you do this

You may not get it back. Microsoft's developer documentation states Smart App Control can only be enabled on a clean install of Windows, and that resetting the device counts as a clean install. Microsoft's consumer FAQ says recent Windows updates allow it to be enabled from the Windows Security app without a clean installation. Those two pages do not agree, and we could not establish which applies to your build — so before you switch it off, assume the worst case and decide whether the app is worth it. While it is off, unknown unsigned code runs without this check.

  1. Confirm first that you trust the specific file you identified earlier, and that you got it from its real source.
  2. Open Windows Security > App & browser control > Smart App Control and set it to Off.
  3. Do what you needed to do — complete the install, or run the tool.
  4. Go straight back to the same screen and see whether the option to turn it on again is available to you. That is the only reliable way to find out which of Microsoft's two statements applies to your machine.
  5. If it cannot be re-enabled and you want it back, the documented route is a clean install or Reset this PC — Microsoft says a reset counts as a clean install. Keep my files preserves your documents but removes installed apps.

Confirmed by the vendor.

Source: Microsoft, Microsoft

Known issues

  • Microsoft's two pages on this disagree about whether Smart App Control can be re-enabled after being turned off. The developer overview says it can only be enabled on a clean install, with a device reset counting as one. The consumer FAQ says recent Windows updates allow enabling it from the Windows Security app without a clean installation. Check the toggle on your own machine rather than trusting either.

    Affects Windows 11 build 22572 and later · Status: unknown

  • Windows Installer Transform (MST) files cannot be digitally signed, so installers that use them can be blocked with no fix available other than temporarily disabling Smart App Control.

    Affects Windows 11 build 22572 and later · Status: workaround only

  • Some older Microsoft-signed binaries are blocked deliberately, because attackers can use them to gain unauthorized access. An app that bundles one of these will be blocked even though the file is genuinely from Microsoft.

    Affects Windows 11 build 22572 and later · Status: open

If none of this worked

If Windows Security has no Smart App Control section at all, something else blocked your app — SmartScreen, Microsoft Defender, memory integrity refusing an unsigned driver, or the game's own anti-cheat rejecting an injected module. Protection history distinguishes them. Enterprise-managed machines and devices in S mode do not run Smart App Control, so on a work laptop the block is almost certainly a policy set by your IT department, and disabling anything locally will not help. If the blocked component is part of a mod that hooks into an online game, be careful about the fix you choose — getting it running may matter less than whether the game's anti-cheat will tolerate it.

Common questions

Can I add an exclusion for one app?
No. Smart App Control has no per-app allowlist you can edit — it is either enforcing for everything or off for everything. That design is the reason this page spends so much effort on identifying what was blocked: the only choices are to get a signed version of the file or to turn the whole feature off.
If I turn it off, can I turn it back on?
Microsoft's own pages disagree. The developer documentation says it can only be enabled on a clean install of Windows, with a device reset counting as one. The consumer FAQ says recent Windows updates allow it to be enabled from the Windows Security app without a clean installation. The practical approach is to turn it off, then immediately check whether the On option is still available to you before you install anything else.
Why did it start blocking things weeks after I installed Windows?
Because it spends that time in evaluation mode, watching what you install and run without blocking anything, and then decides whether the machine is a good fit for enforcement. When it switches over you get a toast notification — which is easy to miss. If your PC was reset rather than freshly installed, that counts as a clean install too, so the same clock started then.
Is Smart App Control the same as SmartScreen?
No. SmartScreen warns you about files and sites with poor reputation and lets you continue anyway. Smart App Control is an allowlist: code runs only if Microsoft's app intelligence predicts it is safe or it carries a certificate from a trusted authority, and there is no button to proceed regardless. That is why an app blocked by Smart App Control fails silently rather than asking you a question.
I only need to install one thing. Is turning it off temporarily reasonable?
It is what Microsoft suggests for installers that use MST files, which cannot be signed. Do it deliberately: identify the blocked file first, get the installer from its real source, turn the feature off, install, and then check whether you can turn it back on. The risk is not the ten minutes it is off — it is finding out afterwards that On is no longer available on your build.

Did this fix work?

If a step is wrong, outdated, or did not help, telling us is the fastest way to get it corrected. Reports are reviewed before new articles.

Report a problem with this page

Related problems

Sources

  • Microsoft · Documentation · checked Aug 22, 2026

    • Smart App Control only allows apps and binaries to run if they are likely to be safe, and blocks malware, potentially unwanted apps and unknown unsigned code by default
    • If the app intelligence service cannot make a prediction, Smart App Control still allows an app signed with a certificate from a CA in the Trusted Root Program
    • Microsoft states Smart App Control can only be enabled on a clean install of Windows, and that resetting the device counts as a clean install
    • It requires Windows 11 build 22572 or higher and is only enabled in certain regions
    • Evaluation mode observes activity without blocking; enforcement mode actively blocks
    • The mode is shown at Settings > Windows Security > App and Browser Control as On, Evaluation or Off
    • Microsoft automatically turns Smart App Control off for users whose regular work it would interrupt too often, such as developers and corporate users
    • A toast notification appears when Smart App Control enters enforcement mode
    • Some older Microsoft binaries are treated as unsafe because attackers can use them for unauthorized access
  • Microsoft · Support page · checked Aug 22, 2026

    • Smart App Control checks whether Microsoft's cloud-powered security service can make a confident prediction about an app's safety
    • Microsoft states that recent Windows updates allow Smart App Control to be enabled within the Windows Security app without requiring a clean installation
    • Smart App Control can be disabled from the Windows Security app settings
    • Windows Installer Transform (MST) files cannot currently be digitally signed, and a block can result when no confident cloud reputation verdict is available for them
    • Enterprise-managed devices and devices in S mode are excluded
  • Microsoft · Support page · checked Aug 22, 2026

    • The message means an app, service or piece of hardware tried to load a driver, app or other file that is not properly signed
    • Only the blocked file stops working; the rest of the application can carry on
    • The Learn more button in the pop-up identifies which driver or file was blocked
    • Blocked items are recorded in Windows Security under Virus & threat protection > Protection history, searchable for Smart App Control or Blocked app entries