A bug in Microsoft’s October Windows update prevents you from turning on a security setting that blocks malicious or suspicious apps. A Registry hack fixes the glitch.
The security feature, called Windows Defender Application Control (WDAC), is designed to prevent unauthorized software from running on a Windows device. It’s a key component of Microsoft’s Zero Trust security model, which assumes that no user or device is inherently trustworthy.
However, after installing the latest Windows update (KB5037079), some users discovered that they couldn’t enable WDAC. When they tried to turn it on, they received an error message saying that the policy couldn’t be applied.
Microsoft confirmed the issue in a support document, stating that it affects devices running Windows 10 and Windows 11. The company said that the bug is caused by a conflict between the update and the WDAC policy.
Fortunately, there’s a workaround. Microsoft recommends modifying the Windows Registry to fix the issue. Here’s how:
- Open the Registry Editor by pressing Win + R, typing “regedit,” and pressing Enter.
- Navigate to the following key: HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control DeviceGuard Scenarios
- Right-click on the “Scenarios” key and select “New” > “Key.”
- Name the new key “WDAC.”
- Right-click on the “WDAC” key and select “New” > “DWORD (32-bit) Value.”
- Name the new value “Enabled.”
- Double-click on the “Enabled” value and set its data to “1.”
- Close the Registry Editor and restart your computer.
After restarting, you should be able to enable WDAC without any issues.
Microsoft is working on a permanent fix for the bug, which will be released in a future update. In the meantime, the Registry hack should allow users to keep their devices secure.
SEE: Microsoft October Windows update disables security setting – workaround