Smart App Control is a security feature in Windows 11 that blocks untrusted or malicious apps. Some users find that the feature switches to Evaluation mode permanently and will not turn on. This happens when the feature cannot make a confident decision about your app usage history. This article explains why Smart App Control gets stuck in Evaluation mode and provides the steps to fix it.
Key Takeaways: Fixing Smart App Control Evaluation Mode on Windows 11
- Windows Security > App & browser control > Smart App Control settings: Shows the current status of Smart App Control and allows you to toggle it Off, On, or Evaluation.
- Settings > Privacy & security > Security > Core isolation > Memory integrity: A prerequisite that must be enabled for Smart App Control to work correctly.
- Clean install of Windows 11: The only guaranteed method to reset Smart App Control from Evaluation mode to a fresh Off state.
Why Smart App Control Switches to Evaluation Mode Permanently
Smart App Control in Windows 11 uses a cloud-based reputation model to decide whether an app is safe. When you first set up Windows 11, the feature enters Evaluation mode. During this period, it observes your app usage without blocking anything. After a few days, it makes a decision: turn On permanently if you install known safe apps, or turn Off if you install many unknown or unsigned apps. If the feature cannot make a confident decision, it stays in Evaluation mode permanently. This is a safety mechanism. The feature does not want to block apps you rely on, so it defers the decision indefinitely.
The permanent Evaluation mode is not a bug. It is a designed behavior. The feature requires a clear signal from your usage history. If you install a mix of signed and unsigned apps, or if you install very few apps, the cloud service cannot build a reliable profile. Once the decision window closes, the feature locks into Evaluation mode. You cannot manually turn it On or Off from the settings page. The toggle becomes grayed out.
Steps to Reset Smart App Control from Permanent Evaluation Mode
There is no direct toggle to exit permanent Evaluation mode. The only reliable method is to perform a clean install of Windows 11. This resets the feature to its fresh state, where it will enter Evaluation mode again and make a new decision. Before doing that, try these steps to confirm the feature is stuck and to rule out other issues.
Step 1: Check the Current Smart App Control Status
- Open Windows Security
Press the Windows key and type Windows Security. Click the app from the search results. - Go to App & browser control
In the left menu, click App & browser control. - Open Smart App Control settings
Under Smart App Control, click Smart App Control settings. - Read the status
If the status reads Evaluation and the radio buttons are grayed out, the feature is locked in permanent Evaluation mode.
Step 2: Enable Memory Integrity
Smart App Control requires Memory Integrity to be enabled. If Memory Integrity is off, Smart App Control may not function correctly and may stay in Evaluation mode.
- Open Windows Security
Press the Windows key and type Windows Security. Click the app. - Go to Device security
In the left menu, click Device security. - Open Core isolation details
Under Core isolation, click Core isolation details. - Turn on Memory integrity
Toggle Memory integrity to On. Restart your PC when prompted.
After the restart, check the Smart App Control status again. If it is still stuck in Evaluation mode, proceed to the clean install.
Step 3: Perform a Clean Install of Windows 11
A clean install erases all apps and settings and installs a fresh copy of Windows 11. Back up your files before starting.
- Create a Windows 11 installation media
Go to the Microsoft Software Download page. Download the Media Creation Tool for Windows 11. Run it and select Create installation media for another PC. Choose a USB drive with at least 8 GB of space. - Boot from the USB drive
Insert the USB drive into your PC. Restart and press the key that opens the boot menu (usually F12, F2, or Escape). Select the USB drive. - Start the installation
On the Windows Setup screen, select your language and click Next. Click Install now. - Choose Custom install
When asked for the installation type, select Custom: Install Windows only (advanced). - Delete all partitions
Select each partition on the drive and click Delete. After all partitions are deleted, select the unallocated space and click Next. Windows will create the necessary partitions automatically. - Complete the setup
Follow the on-screen instructions to complete the installation. After the first boot, Smart App Control will enter Evaluation mode again. Install trusted apps from the Microsoft Store and known publishers. After a few days, the feature should turn On permanently.
If Smart App Control Still Shows Evaluation Mode After a Clean Install
In rare cases, even after a clean install, Smart App Control may stay in Evaluation mode. This can happen if you restore app data from a backup or sign in with a Microsoft account that previously had Evaluation mode. The feature may carry over the evaluation state from the cloud. To avoid this, do not sign in with a Microsoft account during the initial setup. Use a local account instead. Install apps only from the Microsoft Store for the first week. After Smart App Control turns On, you can switch to a Microsoft account.
Smart App Control Evaluation Mode vs Off vs On
| Item | Evaluation | Off | On |
|---|---|---|---|
| Description | Feature monitors app usage without blocking | Feature is disabled and does not check apps | Feature blocks untrusted apps automatically |
| User control | Cannot change manually after lock-in | Can turn On but will re-enter Evaluation | Can turn Off but cannot turn On again without reset |
| Best for | New users or mixed app usage | Users who install many unsigned apps | Users who install only signed apps |
Smart App Control is a one-way feature. Once it decides to turn On or Off, you cannot change it without a clean install. If you rely on unsigned apps for work, keep the feature Off. If you want maximum security, let it turn On by installing only trusted apps during the evaluation period.