Why would you require an optional feature to be a prerequisite for a SECURITY feature?!

Now I need to reinstall my machine.

Thanks for nothing Microsoft.

https://support.microsoft.com/en-us/topic/what-is-smart-app-control-285ea03d-fa88-4d56-882e-6698afdb7003#bkmk_off

What is Smart App Control? - Microsoft Support

Smart App Control is a feature of Windows 11 that helps to block malicious, untrusted, or potentially unwanted apps from running on your device.

So, what do you all think about Microsoft's #SmartAppControl feature?

Should I reinstall Windows after I changed the enforced diagnostics settings in #Intune?

@sassdawe Smart App Control is only available on clean installs of Windows 11

This is the sort of thing that will show up some sort of best practice guide and get people telling you it's basic security, yet noone will do it.

@jsmall yeah, I started with a clean install, but the pre-requisite optional diagnostics data is turn off centrally, so I never had a chance to have Smart App Control enabled...

Funny thing is, Windows itself claims that Your device will be equally secure and will operate normally even if you choose not to send optional diagnostic data.

Which can't be true unless SAC is a fake security control.

@sassdawe Looking the link you posted, I'm guessing it will:

  • Break a lot of OSS products.
  • Not stop a lot of malware given a lot of it is signed