lalanc01​ Good question and timely with the recent changes! Starting with the April 2026 update for Windows 11 25H2, Microsoft removed the clean-install restriction — Smart App Control (SAC) can now be toggled on/off from Windows Security > App & browser control at any time, without reinstalling.

So the short answer: you can now enable it post-provision on unmanaged devices, but for enterprise-managed devices, App Control for Business is the recommended path.