Forum Discussion
Windefender AV Signature Updates Cannot be Scheduled
Hey all! We have some workstations that we'd like to schedule WD AV Signature Updates on, rather than having them scanned/DL'd/installed on the standard frequency, and we've run into some trouble. ...
So after reading through the linked article, I can say we've already tried that, and it hasn't had any effect. We don't use Windows Intune, we're on Win10 Enterprise for these terminals.
We set the " Specify the interval to check for definition updates" GPO to 24, to have it check once per day, and set the "Specify the time to check for definition updates" to 60 (for 01:00), but it still seems to check at random times during the day, and installs the updates at that time.
We set the " Specify the interval to check for definition updates" GPO to 24, to have it check once per day, and set the "Specify the time to check for definition updates" to 60 (for 01:00), but it still seems to check at random times during the day, and installs the updates at that time.
there are some additional settings regarding updates, such as updating before a scheduled scan or update on startup and so forth.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-event-based-updates-microsoft-defender-antivirus?view=o365-worldwide
I suppose these could be the reason for the out of band updates.
The ad-hoc updates listed happen dynamically when deemed necessary by cloud protection, but this will not affect the signature version. So assuming you mean the signature version goes up, the ad-hoc updates are not related.
Other than that regular OS windows update checks will download signatures as well, in case those run regularly.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-event-based-updates-microsoft-defender-antivirus?view=o365-worldwide
I suppose these could be the reason for the out of band updates.
The ad-hoc updates listed happen dynamically when deemed necessary by cloud protection, but this will not affect the signature version. So assuming you mean the signature version goes up, the ad-hoc updates are not related.
Other than that regular OS windows update checks will download signatures as well, in case those run regularly.