แก้ไข

Smart App Control overview

Smart App Control is an app execution control feature that combines Microsoft app intelligence services and Windows code integrity features to protect users from untrusted or potentially dangerous code. Smart App Control selectively allows apps and binaries to run only if they're likely to be safe. Microsoft's app intelligence services provide safety predictions for many popular apps. If the app intelligence service is unable to make a prediction, then Smart App Control will still allow an app to run if it is signed with a certificate issued by a certificate authority (CA) within the Trusted Root Program.

Malware, Potentially Unwanted Apps (PUA), and unknown, unsigned code are blocked by default.

Smart App Control stages

Smart App Control can either run in evaluation mode or enforcement mode.

In evaluation mode, Smart App Control is evaluating whether the device is a good fit for the protection it offers. There are some legitimate tasks that corporate users, developers, or others may do regularly that may not be a great experience with Smart App Control running. If we detect that you're one of those users, we'll automatically turn Smart App Control off so you can work with fewer interruptions.

In enforcement mode, Smart App Control is actively protecting your device. Apps cannot be run unless they are recognized by Microsoft's app intelligence services, or they are signed with a trusted certificate.

Frequently Asked Questions

How can I tell if Smart App Control is installed my device?

Go to Settings > Windows Security > App and Browser Control. If Smart App Control is installed on your system, you will see a section called Smart App Control

How can I tell if Smart App Control running in evaluation or enforcement mode?

Go to Settings > Windows Security > App and Browser Control.

  • If On is selected, Smart App Control is running in enforcement mode.
  • If Evaluation is selected, Smart App Control is running in evaluation mode.
  • If Off is selected, Smart App Control is not running on this device.

Will I be notified when Smart App Control enters enforcement mode?

Yes. You will receive a Toast Notification when Smart App Control enters enforcement mode.

What files will Smart App Control block while running in enforcement mode?

Smart App Control allows apps and binaries to run only if they're likely to be safe. Smart App Control will block apps and binary files identified as unsafe by Microsoft app intelligence services unless those files are code signed with a certificate issued by a certificate authority (CA) within the Trusted Root Program.

Note that some older Microsoft binaries are considered unsafe because attackers can potentially use them to gain unauthorized access. For a complete list of these files, please see Application Control for Windows.

Related content

  • อัปเดตล่าสุดเมื่อ