On 2026-02-25 06:40, Christian Lohmaier wrote:
Hi Stuart,
On Fri, Feb 20, 2026 at 11:34 PM V Stuart Foote
<[email protected]> wrote:
Seems the nightly builds are now being blocked by a recent Windows 11
security patch,
To run the soffice.exe / soffice.bin as *administrator* have to change
May I ask what usecase you have for running LibreOffice as
administrator?
None. Just poorly written :-( And I missed a critical comma, sorry...
I should have written something more like:
To be able to run the unsigned nightly soffice.exe (soffice.bin)
builds--as an *administrators* group user, in Windows
System Settings open the 'Smart App Control' (System - Security - Smart
App Control) and set value to either 'Off' or 'Evaluate'.
'On' is now the default (which causes the issue with rejected
LibreOffice nightly builds). And in prior Windows
patching the dialog included a warning that once disabled a Windows
reinstall might be necessary to reenable.
That is no longer true with recent Windows patching. But reenabling
currently does requires a registry edit.
Reenable is not offered from the system settings dialog, and the
registry tweak of the 'VerifiedAndReputablePolicyState'
DWORD may require regedit.exe to be launched as an administrators group
member as well.
the Smart App Control value to either Disabled or Evaluate,
Enabled now default, with text warning that Windows would need to be
installed to reenable - NOT TRUE
Well, the registry might cease to work any time, so I wouldn't
necessarily say it is not true based on that..
Just requires a Windows registry tweak:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy\VerifiedAndReputablePolicyState
1 - On and SAC enabled
0 - OFF and SAC disabled
2 - On and SAC in evaluation mode (maybe better, but it was still
blocking unsigned nightly builds)
Also looks like that will be exposed in UI as well
https://www.windowslatest.com/2025/12/16/microsoft-confirms-you-can-soon-disable-smart-app-control-without-reinstalling-windows-11/
"Microsoft told Windows Latest that it made changes to the Smart
AppControl (SAC) to ensure “users can switch SAC off or on without any
clean install requirement based on feedback.” This change will roll
out in 2026, and it’s currently being tested in the Windows Insider
Program."
(also at least when SAC was introduced it was tied to sending
telemetry data - so in Europe at least you could deny/restrict that
when installing windows and limiting telemetry then also automatically
disabled SAC)
Think it has landed (26200.7840) but just checked, and setting the 'On'
to reenable still requires being done via regedit.exe tweak of the
DWORD.
ciao
Christian
--
Stuart
--
To unsubscribe e-mail to: [email protected]
Problems? https://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: https://wiki.documentfoundation.org/Netiquette
List archive: https://listarchives.libreoffice.org/global/users/
Privacy Policy: https://www.documentfoundation.org/privacy
