Smart App Control improves
Microsoft pushed Windows 11 KB5079391, which rolls out Smart App Control improvements to help block unauthorized or risky apps on managed devices. The update creates a new lever for schools to reduce unwanted software on staff and student machines. (bleepingcomputer.com)
Microsoft released the optional preview update KB5079391 on March 26, 2026 for Windows 11 versions 24H2 and 25H2, publishing OS builds 26100.8116 and 26200.8116. (support.microsoft.com) The update makes Smart App Control configurable without performing a clean Windows reinstall, a change reported by multiple outlets covering the March 2026 preview. (windowslatest.com) Prior to this update, Microsoft’s Smart App Control FAQ stated the feature was only available on clean installs and that enabling it after setup required resetting or reinstalling Windows. (support.microsoft.com) KB5079391 is a non-security preview delivered via a two‑phase model (gradual rollout followed by normal rollout) and can be installed through Windows Update, the Microsoft Update Catalog, or by using DISM with MSU packages. (support.microsoft.com) Microsoft documentation notes Smart App Control uses the same underlying technology as App Control for Business and that Intune can deploy App Control policies using built‑in profiles or a custom OMA‑URI for more granular circle‑of‑trust definitions. (learn.microsoft.com) Intune guidance also describes managed‑installer rules and the Intune management extension for tagging trusted Win32 installers and delivering apps or scripts to Windows devices, mechanisms that organizations can use to populate approved‑app lists. (learn.microsoft.com) Vendor coverage of KB5079391 lists roughly 29 changes in the preview, including File Explorer, display, and Narrator fixes bundled alongside the Smart App Control change. (bleepingcomputer.com)
