Microsoft has officially confirmed a new issue stemming from the recent October cumulative update for Windows 11. Devices that had the Smart App Control security feature turned off prior to installing the update may find the toggle completely disabled in the Windows Security dashboard.

According to release notes published by Microsoft, the update leaves affected users unable to re-enable the feature through normal system settings. While devices with the feature previously active remain fully protected, those attempting to turn it back on encounter a grayed-out control interface.

windows 11 kb5127648 smart app control bug

The windows 11 kb5127648 smart app control bug affects systems running recent versions of the operating system, including Windows 11 version 24H2, version 25H2, and version 26H2 . The problem is isolated specifically to devices where Smart App Control was turned off before installing the October update . Users who keep the feature active constantly or who never intended to use it are unaffected . Microsoft has acknowledged the flaw and issued administrative registry commands alongside Group Policy definitions to restore functionality while a permanent fix remains in development .

Smart App Control Disabled After Windows 11 Update

Smart App Control is designed to protect users by blocking untrusted, unsigned, or potentially unwanted applications . Built on top of Microsoft Defender and Windows code integrity features, the tool uses cloud intelligence services to predict whether an application poses a risk to system stability or security .

Following the release of cumulative update KB5127648, users attempting to adjust their security posture discovered that the control panel within the Windows Security application refused to respond . Navigating to App & browser control and selecting Smart App Control settings presents users with a non-interactive display . The radio buttons intended to switch the feature between On, Evaluation, and Off appear faded, preventing manual interaction .

This situation creates confusion for system administrators and end users alike, particularly those who temporarily turn off security policies to install specialized developer tools or legacy software with plans to reactivate protection immediately afterward.

Affected Systems and Security Settings Impact

Microsoft emphasized in its security dashboard update that active protection mechanisms have not been compromised . Devices running Smart App Control continuously prior to update KB5127648 maintain their protective state without interruption .

In an official release statement, Microsoft detailed the behavior:

"After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off . On affected devices, the option to turn on Smart App Control might be grayed out . Devices where Smart App Control is already turned on are not affected and remain protected ."

The bug represents another hurdle in an update cycle that has seen multiple localized friction points. While update KB5127648 introduced notable system fixes, including addressing gaming input issues and restoring File Explorer PDF preview pane support, side effects in security configuration and networking have forced IT departments to apply interim policies.

Official Workaround and Registry Fix Guidance

To assist users and enterprise administrators needing immediate access to the feature, Microsoft published temporary mitigation instructions involving command-line modifications to system policy overrides .

Users who need to bypass the grayed-out user interface can execute administrative commands via Command Prompt . Opening an elevated command prompt and applying feature management overrides reinstates the missing controls :

  • Open the Start Menu, type cmd, right-click Command Prompt, and choose Run as administrator .
  • Execute the command: reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2883193997 /t REG_DWORD /d 1 /f .
  • Execute the companion command: reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2850574478 /t REG_DWORD /d 1 /f .
  • Restart the device to apply the change .

For managed networks, systems engineering teams can utilize updated Group Policy administrative templates to push equivalent feature staging keys across affected endpoints without requiring manual interaction at individual workstations .

Expected Patch and Timeline for Affected Devices

Microsoft noted that its engineering groups are actively working on a resolutions package that will be delivered in an upcoming release cycle . System updates are expected either through an out-of-band non-security release or as part of next month's cumulative update rollup.

In the interim, administrators managing mixed environments are advised to evaluate endpoints prior to changing security toggles. Users who do not strictly require Smart App Control changes immediately can await the automated servicing update through Windows Update.