Microsoft’s latest Windows 11 cumulative patch (KB5127648) has unintentionally disabled the Smart App Control feature for a subset of users. The security tool, designed to prevent unauthorized applications from running, now appears as a grayed‑out toggle for many PCs that previously had it turned on. While the company says the issue mainly affects machines that already had the feature disabled, anyone who managed to enable it before the update finds the option unresponsive after a simple reboot.
The good news is that a temporary workaround is already available. Microsoft advises users to back up the registry before making any changes, then modify two specific values under **HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagementOverrides**. Setting the DWORD entries 2883193997 and 2850574478 to 1 restores the ability to turn Smart App Control back on.
**Steps to apply the fix**
1. Open the Registry Editor (type regedit in the Start menu and launch it).
2. Navigate to the path above.
3. Locate the two values; if they are missing, create them as **REG_DWORD** entries.
4. Double‑click each entry and change the data to 1.
5. Restart the computer, then verify that the Smart App Control toggle is active again.
Enterprise administrators can also deploy the same registry tweaks via Group Policy or use the Community Protection feature that Microsoft provides for business editions. This method ensures the setting persists across updates and domain‑joined devices.
Microsoft has confirmed that a permanent patch is in development, but no release date has been announced yet. In the meantime, the registry edit offers a quick way to regain control over Smart App Control without waiting for the next cumulative update.
If you’re uncomfortable editing the registry manually, consider using a trusted third‑party utility that can apply the changes automatically, or simply wait for the official fix. Either way, the current workaround restores the functionality that the October update inadvertently muted.
