Smart Application Control (SAC) - Why it behaves as it does....

[ForgottenSeer 95367]

 

[Ink]

Smart move.

1. Running security on a fresh device is better than trying to clean up an infected one.
2. This is still new technology territory, learning and feedback phase?
3. Nothing out of the ordinary. Many services are limited to certain countries before a global release.

Theory: Microsoft likely have the enough data to know which regions have the cleanest PCs, and ideal regions to test this tech most effectively.

Microsoft's push for 'developers' to sign their apps.

• Cryptography Tools - Win32 apps
• Program Requirements - Microsoft Trusted Root Program

What is Smart App Control? - Microsoft Support

Smart App Control is a feature of Windows 11 that helps to block malicious, untrusted, or potentially unwanted apps from running on your device.

support.microsoft.com

Microsoft have been more transparent in recent years.

Diagnostics, feedback, and privacy in Windows - Microsoft Support

Learn how Microsoft collects and uses different kinds of diagnostic information to help fix problems quickly and improve your Windows experience, and how to control the data you share.

support.microsoft.com

Image: Windows help & learning

 

[ForgottenSeer 95367]

Smart move.

Microsoft learned a very valuable lesson from Windows S Mode; blocking users from "doing stuff" provides the best security.

2. This is still new technology territory, learning and feedback phase?

I think SAC is still half-baked. I've observed different SAC behaviors on a W11 system that was upgraded to 22H2 (I can enable SAC or put it into Evaluation Mode) and on a clean install of W11 (SAC is disabled). There is no rhyme nor reason, and without any deep dive explanation from Microsoft, we cannot be sure if Microsoft intends these behaviors or it is something else - as in wonky or bugs.

 

[bellgamin]

For Windows 7 through 11, SpyShelter provides granular app control by means of 2 components: (1) Host Based Intrusion Protection System (HIPS), and (2) Application Execution Control. If Win 11 (or Win 12) eventually can do an equal or better job, I will possibly upgrade my OS.

 

[Andy Ful]

SpyShelter protection is very different from Windows 11 built-in protection with enabled SAC.
With SpyShelter you "cook your meals" by yourself. It is OK if you are a good cook.
With SAC you are going to the Microsoft restaurant. It is OK if you can eat standardized (Microsoft-approved) meals.

 

[Moonhorse]

I had to disable SAC as it was causing more problems than i thought , rgb lightnings caused to reset every single windows restart and i wonder what else did not work correctly by having it enabled

 

[legendcampos]

Hello everyone! Sorry to revive this topic but it is not possible to pass the cloth to this new microsoft technology, in theory an extra layer of protection is good, but in practice it is being a headache, the windows dlls themselves are being blocked, I hope that with time improve or abandon.