System Restore can revert system files, drivers, services, and security components to an earlier state, and that can interact badly with Smart App Control and other security features.
Key points from the behavior described:
- Smart App Control was On before the restore.
- After System Restore, Smart App Control began blocking many previously working apps and interfered with antivirus and Windows Security.
- Turning Smart App Control Off restored normal behavior.
How Smart App Control is designed to work
- Smart App Control is only supported on clean installs of Windows 11, not on upgraded systems or systems that have been reset multiple times.
- It runs in three modes: Evaluation, On, and Off. Once it has been manually turned Off, it cannot be turned back to Evaluation without a reset or reinstall.
- In On (enforcement) mode, it blocks apps and binaries that are considered unsafe unless they are trusted by Microsoft’s app intelligence or are properly code-signed.
- There is no per‑app allow list for Smart App Control; it is either On, Evaluation, or Off.
Why this likely happened after System Restore
- System Restore rolled back system components and security state, but Smart App Control remained in an enforcement configuration that no longer matched the restored environment.
- Older or unsigned apps (such as legacy versions of Quicken, Hallmark Event Planner, MODI, etc.) are more likely to be treated as untrusted and blocked when Smart App Control is On.
- The restore may also have affected Windows Security and antivirus integration, causing additional instability until Smart App Control was turned Off.
Whether others can see similar issues
- Smart App Control is explicitly documented as working only on clean installs and being sensitive to system state. Using System Restore, reset, or upgrade paths can lead to situations where:
- Smart App Control is On but the restored system has older or mismatched binaries.
- Legitimate but older/unsigned apps are blocked.
Recommended path forward given the need to keep legacy apps Because Smart App Control cannot be fine‑tuned per app and is known to be strict with older or unsigned software:
- Leave Smart App Control turned Off
- This avoids repeated blocking of legacy apps that are needed and already known/trusted.
- Other protections (Microsoft Defender Antivirus, SmartScreen, etc.) can still provide security.
- If Smart App Control must be used in the future
- It can only be reliably re‑enabled in a supported way by doing a Reset this PC or a clean reinstall of Windows 11, and choosing Send optional diagnostic data during setup so Smart App Control can evaluate and decide if the device is a good candidate.
- However, a clean install or reset may break or require reinstallation of legacy apps; even then, Smart App Control may still block them if they are not properly signed.
- If malware or corruption is suspected
- If instability returns or there are signs of malware, follow the guidance to reset, restore, or reinstall Windows and then restore personal files from backup. This is the recommended approach when malware or irreversible changes are suspected.
Given the requirement to keep Hallmark Event Planner and MODI working, and the fact that Smart App Control has already been turned Off and stability restored, the most practical and supported configuration is to leave Smart App Control Off and rely on other security layers while maintaining good backup and update practices.
References: