I currently have both enabled. SAC was a fail for me before on a previous install, but everything works fine for now.
I would be interested in other peoples opinions.
I would be interested in other peoples opinions.
Benefits of Smart App control (SAC) and Core Isolation on Windows 11
- Thread starter BSONE
- Start date
Bot
AI-powered Bot
- Apr 21, 2016
- 4,421
That's great to hear! Both SAC and Core Isolation provide enhanced security. SAC allows you to control your apps remotely, while Core Isolation provides hardware-based security features. They might cause some compatibility issues, but if they're working fine for you, that's a plus. Looking forward to hearing from others too.
- Dec 23, 2014
- 8,538
Nonsense. Please update your post:: SAC is a Smart App Control on Windows 11:
What is Smart App Control? - Microsoft Support
Smart App Control is a feature of Windows 11 that helps to block malicious, untrusted, or potentially unwanted apps from running on your device.
support.microsoft.com
- Dec 23, 2014
- 8,538
Here is what David Weston ( Vice President Enterprise and OS Security at Microsoft.) writes about SAC:
It is a strong protection at home, hybrid work, or very small businesses. It will not be so effective against targeted attacks, because the attacker can intentionally use a properly signed 0-day malware or MotW bypass (for scripts) to skirt around SAC. Anyway, such attacks are rare at home, because the successful attack would often require properly signed or fileless payloads.
- Mar 29, 2018
- 7,664
I use SAC with MS Defender and both work just fine here. If you find SAC is blocking an application you use and it has become non-functional, post specifics on the Feedback Hub and follow the on-screen instructions to upload the file. They won't reply to you, but you may find the app is no longer blocked after some time has passed.
Last edited:
kailyn
Level 2
- Jun 6, 2024
- 85
You will be fine with it until it blocks and breaks something for you because "users want to use stuff."
- Dec 23, 2014
- 8,538
Yes, it is probably not a good choice for users who "want to use stuff". Even popular and signed software can be partially blocked due to using some unsigned DLLs.
But many people use computers for simple tasks like web browsing, watching videos, listening to music, email management, reading documents, shopping, etc. Many adults have no time and inclination to do more computer tasks. I think that for them, SAC can be a good choice.
But many people use computers for simple tasks like web browsing, watching videos, listening to music, email management, reading documents, shopping, etc. Many adults have no time and inclination to do more computer tasks. I think that for them, SAC can be a good choice.
- Mar 29, 2018
- 7,664
In fact, I just submitted an installer for a Samsung app, probably not signed, that was blocked by SAC. We'll see if it's allowed to run after some time has passed.
- Dec 23, 2014
- 8,538
- Mar 29, 2018
- 7,664
Not that particular one. The Store version wasn't compatible with my machine.
kailyn
Level 2
- Jun 6, 2024
- 85
That is a people problem that cannot be solved with software.
Microsoft should, once and for all, lay down the rules and not waiver. Unsigned DLLs are a pariah and the only correct and effective way to deal with them is to block them while at the same time create some mechanism where widely used, long-standing unsigned DLLs are signed for the greater common good.
That is another people problem. Microsoft should not have to deal with people and their problems. Their ignorance and bad behaviors.
Security is not software. It is a process. (And that process has to be handled entirely and properly by the user side, and not the developer side.)
The world is changing and the old models that cater to "users want to use stuff" have been obsolete for a long time by now. The reason nobody wants to tackle all those user issues is because dealing with people is such an awful task. However, with the ascendancy of AI moving forward, things that people really are not going to like is going to have to be done. The rules about users and what they are allowed and not allowed to do is going to have to change otherwise sticking to dinosaur thinking of "users want to use stuff" shall be bring down entire societies via malicious campaigns. There are attack models being studied at top world universities regarding how future malware campaigns will unfold and it is a really ugly picture. A single home user "that wants to use stuff" will be the genesis of an attack that brings down an entire national electrical grid.
In that future, SAC will not nearly be enough. Going forward, Microsoft is going to have to become much more authoritarian with its operating systems and software to protect society. If it does not then mass global disruption of the worst kind shall proceed like clock-work.
I know people here at MT cannot cope with this. Lots of people here are stuck in the past of "users want to use stuff and they must be allowed to do so."
Lots of people here at MT stuck in the past are just dead wrong. They can be forgiven because they cannot help themselves. They are stuck in their belief that a "user that wants to use stuff" must always come first. Well, catering to user whims is the reason we're at where we're at as far as the malware problem. That model never has worked because it never could work - ever.
Thank's for the comments folks. I will stick with SAC until it breaks something important to me. It is much better now than it was in the the early days where it even blocked Office 365 DLL's.
- Dec 23, 2014
- 8,538
But the changes can be a challenge. The motto "users want to use stuff" is built into the economy of most countries (since the rise of capitalism). This motto helped to create the world with an expanding amount of goods and offers. The probable cons are resource shortage and possible climate change. Similarly, in the IT world, we have cyber-criminals and malicious campaigns.
Great to hear SAC is working well for you now! I’ve found Smart App Control to be pretty helpful in enhancing security by blocking untrusted apps, which is especially handy if you download software from various sources. Core Isolation is also a solid feature, adding an extra layer of protection by isolating critical processes. I’ve had a good experience with both enabled, feeling more secure overall. It’d be interesting to hear how others find these features, too, especially if they've encountered any issues or noticed performance impacts.
Similar threads
