You can manage and configure Microsoft Defender Antivirus with the following tools: Microsoft Intune (now part of Microsoft Endpoint Manager) Microsoft Endpoint Configuration Manager (now part of Microsoft Endpoint Manager) Group Policy PowerShell cmdlets Windows Management Instrumentation (WMI) The Microsoft Malware Protection Command Line Utility (referred to as the mpcmdrun.exe utility The following articles provide further information, links, and resources for […]
Mobile devices and VMs may require more configuration to ensure performance is not impacted by updates. There are two settings that are useful for these devices: Opt in to Microsoft Update on mobile computers without a WSUS connection Prevent Security intelligence updates when running on battery power The following articles may also be useful in […]
Microsoft Defender Antivirus allows you to determine if updates should (or should not) occur after certain events, such as at startup or after receiving specific reports from the cloud-delivered protection service. Check for protection updates before running a scan You can use Microsoft Endpoint Configuration Manager, Group Policy, PowerShell cmdlets, and WMI to force Microsoft […]
Microsoft Defender Antivirus lets you define how long an endpoint can avoid an update or how many scans it can miss before it is required to update and scan itself. This is especially useful in environments where devices are not often connected to a corporate or external network, or devices that are not used on […]
Note This functionality requires Microsoft Defender Antivirus version 4.18.2106.X or newer. To create your own custom gradual rollout process for Defender updates, you can use Group Policy, Microsoft Endpoint Manager, and PowerShell. The following table lists the available group policy settings for configuring update channels: TABLE 1 Setting title Description Location Select gradual Microsoft Defender […]
It is important to ensure that client components are up-to-date to deliver critical protection capabilities and prevent attacks. Capabilities are provided through several components: Endpoint Detection & Response Next-generation protection with cloud-delivered protection Attack Surface Reduction Updates are released monthly using a gradual release process. This process helps to enable early failure detection to catch impact as […]
Microsoft Defender Antivirus lets you determine when it should look for and download updates. You can schedule updates for your endpoints by: Specifying the day of the week to check for protection updates Specifying the interval to check for protection updates Specifying the time to check for protection updates You can also randomize the times […]
Keeping your antivirus protection up to date is critical. There are two components to managing protection updates for Microsoft Defender Antivirus: Where the updates are downloaded from; and When updates are downloaded and applied. This article describes how to specify from where updates should be downloaded (this is also known as the fallback order). See Manage Microsoft Defender […]
Keeping Microsoft Defender Antivirus up to date is critical to assure your devices have the latest technology and features needed to protect against new malware and attack techniques. Make sure to update your antivirus protection, even if Microsoft Defender Antivirus is running in passive mode. There are two types of updates related to keeping Microsoft Defender […]
Important Some information relates to prereleased product which may be substantially modified before it’s commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. Microsoft Defender Antivirus is automatically installed on endpoints running the following versions of Windows: Windows 10 or newer Windows Server 2022 Windows Server 2019 Windows […]