Serious Discussion Does enabling Smart App Control prevent unblocking files downloaded from internet?

Parkinsond

Parkinsond

Level 65
Thread author
Verified
Top Poster
Well-known
Dec 6, 2023
5,490
17,509
6,369
I was able before, whiel SAC was off, to unblock files downloaded from internet through properties; after enabling I, I can not.
When tick unblock and click OK and reopen properties, I found unblock as it is.
Trying to repeat the steps one more time yields an error message.
 
  • Like
Reactions: Dave Russo and rashmi
Enabling Smart App Control (SAC) can indeed interfere with the unblocking of files downloaded from the internet. SAC is designed to prevent potentially harmful actions, including unblocking certain files. You may need to disable SAC temporarily to unblock your files. Always ensure the files are safe before doing so.
 
  • Like
Reactions: Parkinsond
Bot said:
Enabling Smart App Control (SAC) can indeed interfere with the unblocking of files downloaded from the internet. SAC is designed to prevent potentially harmful actions, including unblocking certain files. You may need to disable SAC temporarily to unblock your files. Always ensure the files are safe before doing so.
Click to expand...
Cannot be disabled temporarly; if disabled, it is until reinstall.
 
  • Like
Reactions: Dave Russo
Parkinsond said:
Cannot be disabled temporarly; if disabled, it is until reinstall.
Click to expand...
In that case, you might need to consider creating an exception for the specific file or directory within the SAC settings, if possible. If not, you may have to reconsider whether the benefits of SAC outweigh the inconvenience of not being able to unblock files. Always prioritize your system's security.
 
Bot said:
In that case, you might need to consider creating an exception for the specific file or directory within the SAC settings, if possible. If not, you may have to reconsider whether the benefits of SAC outweigh the inconvenience of not being able to unblock files. Always prioritize your system's security.
Click to expand...
SAC is exceptionless.
 
  • Like
Reactions: Dave Russo
Parkinsond said:
SAC is exceptionless.
Click to expand...
If SAC is exceptionless and cannot be temporarily disabled, you may need to weigh the importance of the file against the security provided by SAC. If the file is absolutely necessary, you might have to disable SAC permanently. However, this should be a last resort and only done if you're confident the file is safe.
 
  • Like
Reactions: Parkinsond
Parkinsond said:
Cannot be disabled temporarly; if disabled, it is until reinstall.
Click to expand...
You can actually activate SAC without having to reinstall windows 11, you just need to use WinRE and load Hive from the offline system edit the Registry and then you download Hive often located in this directory C:\Windows\System32\config. Although I have the how-to instructions I haven't managed that feat yet. My credit goes to @Andy Ful who gave me this tip.
 
  • Like
Reactions: Parkinsond and rashmi
Parkinsond said:
I was able before, whiel SAC was off, to unblock files downloaded from internet through properties; after enabling I, I can not.
When tick unblock and click OK and reopen properties, I found unblock as it is.
Trying to repeat the steps one more time yields an error message.
Click to expand...

It is a bug related to the Explorer file cache. The MotW is removed (file is unblocked), but Explorer does not update the cache.
After restarting Windows, the issue disappears.
 
  • Like
  • +Reputation
  • Hundred Points
Reactions: Dave Russo, roger_m, simmerskool and 5 others
piquiteco said:
You can actually activate SAC without having to reinstall windows 11, you just need to use WinRE and load Hive from the offline system edit the Registry and then you download Hive often located in this directory C:\Windows\System32\config. Although I have the how-to instructions I haven't managed that feat yet. My credit goes to @Andy Ful who gave me this tip.
Click to expand...
Me too; I do not think I have knowledge and courage to try.
 
  • Like
Reactions: rashmi and piquiteco
Parkinsond said:
You are right; how to fix this bug?
Click to expand...

We must wait for Microsoft's fix. Anyway, it is a cosmetic bug. SAC knows the file is unblocked even if Windows Explorer displays wrong information.
Also, Explorer can recognize that the file is already unblocked and shows an error message when trying to unblock it.
 
  • Like
  • +Reputation
  • Thanks
Reactions: Trident, simmerskool, rashmi and 2 others
Never had alarm's problem with MD (configure defender 4011) with high parameters when using standalone executable.
 
7Oz-64 said:
Never had alarm's problem with MD (configure defender 4011) with high parameters when using standalone executable.
Click to expand...
I get detection by MD and even after excluding, some parts get blocked by SAC; it launches but without dark mode.
Using the portable version is problem-free.
 
Parkinsond said:
I get detection by MD and even after excluding, some parts get blocked by SAC; it launches but without dark mode.
Using the portable version is problem-free.
Click to expand...
Update: after restart, SAC blocked it.
 
From: How to Activate Smart App Control
Now, here’s where things get interesting—Smart App Control isn’t something you can just toggle on like your Bluetooth.
  • Clean Install Required: If your system didn’t start with Smart App Control enabled, you’ll need to reinstall Windows 11 for activation. Why? Microsoft prioritizes security from scratch and ensures there’s no existing untrusted app lurking in your system when Smart App Control starts protecting.
To turn it on during setup:
  • Reset your device via “Reset this PC” or reinstall Windows 11.
  • During the setup process, enable Send optional diagnostic data (this helps Smart App Control run smoother and make more informed decisions).
Click to expand...
That last sentence makes me wonder if "Send optional diagnostic data" is needed for SAC to properly function.
It was a setting I normally turned off in Windows 11, but now I keep it enabled when using SAC.

@Parkinsond Do you have "Send optional diagnostic data" enabled in Windows 11?
 
  • Like
Reactions: simmerskool, Parkinsond and piquiteco
Gandalf_The_Grey said:
From: How to Activate Smart App Control

That last sentence makes me wonder if "Send optional diagnostic data" is needed for SAC to properly function.
It was a setting I normally turned off in Windows 11, but now I keep it enabled when using SAC.

@Parkinsond Do you have "Send optional diagnostic data" enabled in Windows 11?
Click to expand...
How do you know how to activate Send optional diagnostic data by Gpedit? Why is mine disabled by the administrator?
 
  • Like
Reactions: simmerskool
Gandalf_The_Grey said:
From: How to Activate Smart App Control

That last sentence makes me wonder if "Send optional diagnostic data" is needed for SAC to properly function.
It was a setting I normally turned off in Windows 11, but now I keep it enabled when using SAC.

@Parkinsond Do you have "Send optional diagnostic data" enabled in Windows 11?
Click to expand...
SAC is working just fine and blocking my apps to the left and right with both "send optional diagnostic data" and "automatic sample submission" turned off; I hate SAC 😒
 
  • Like
Reactions: piquiteco
piquiteco said:
How do you know how to activate Send optional diagnostic data by Gpedit? Why is mine disabled by the administrator?
Click to expand...
Do you use any program like O&O ShutUp 10 ?
Parkinsond said:
SAC is working just fine and blocking my apps to the left and right with both "send optional diagnostic data" and "automatic sample submission" turned off; I hate SAC 😒
Click to expand...
But could that be the reason behind all your SAC blocks?
 
  • Like
  • +Reputation
Reactions: simmerskool, Parkinsond and piquiteco

You may also like...