Configure App Install Control: registry value ConfigureAppInstallControlEnabled and 1 moreComputerHKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen

Policy ID: ConfigureAppInstallControl
Scope: Computer Configuration
Supported on: At least Windows Server 2016, Windows 10 Version 1809
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › Windows Defender SmartScreen › Explorer

Registry

ConfigureAppInstallControlEnabled

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen Current key

Enabled value: 1
Disabled value: 0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen]

; Options (use only one)
; Enabled
"ConfigureAppInstallControlEnabled"=dword:00000001
; Disabled
"ConfigureAppInstallControlEnabled"=dword:00000000

CMD

:: Options (use only one)

:: Enabled
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControlEnabled" /t REG_DWORD /d 1 /f
:: Disabled
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControlEnabled" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControlEnabled' -PropertyType DWord -Value 1 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControlEnabled' -PropertyType DWord -Value 0 -Force | Out-Null

ConfigureAppInstallControl

REG_SZComputer

HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen Current key

Enabled value: Depends on the option value
Element: Pick one of the following settings:

Options
Item	Stored value
Turn off app recommendations	Anywhere
Show me app recommendations	Recommendations
Warn me before installing apps from outside the Store	PreferStore
Allow apps from Store only	StoreOnly

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen]

; Options (use only one)
; Turn off app recommendations
"ConfigureAppInstallControl"="Anywhere"
; Show me app recommendations
"ConfigureAppInstallControl"="Recommendations"
; Warn me before installing apps from outside the Store
"ConfigureAppInstallControl"="PreferStore"
; Allow apps from Store only
"ConfigureAppInstallControl"="StoreOnly"

CMD

:: Options (use only one)

:: Turn off app recommendations
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_SZ /d "Anywhere" /f
:: Show me app recommendations
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_SZ /d "Recommendations" /f
:: Warn me before installing apps from outside the Store
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_SZ /d "PreferStore" /f
:: Allow apps from Store only
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen" /v "ConfigureAppInstallControl" /t REG_SZ /d "StoreOnly" /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Force | Out-Null

# Options (use only one)
# Turn off app recommendations
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControl' -PropertyType String -Value 'Anywhere' -Force | Out-Null
# Show me app recommendations
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControl' -PropertyType String -Value 'Recommendations' -Force | Out-Null
# Warn me before installing apps from outside the Store
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControl' -PropertyType String -Value 'PreferStore' -Force | Out-Null
# Allow apps from Store only
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\SmartScreen' -Name 'ConfigureAppInstallControl' -PropertyType String -Value 'StoreOnly' -Force | Out-Null