Forum Discussion
Large numbers of scheduled full scans being cancelled - what's the cause?
I am reviewing scan related Adv Hunting data for one of my clients and can see large numbers of events with an ActionType of "AntivirusScanCancelled" in the DeviceEvents table. These events coinc...
PJR_CDF I am also facing same issue with Defender full scan. I have it scheduled to run once per week. And scheduled task is failing with status 0x1 and Warning message on Event Viewer has the same message - Microsoft Defender antivirus has been stopped before completion.
We found our issue was mainly caused by the behaviour outlined here:
If a device is unplugged and running on battery during a scheduled full scan, the scheduled scan stops with event 1002, which states that the scan stopped before completion. Microsoft Defender Antivirus runs a full scan at the next scheduled time.
PJR_CDF That's not the case in my scenario. I am talking about servers, i have checked
1. no user intervention
2. no reboots
3. no battery un-plug case
- How long are the scans running for before they get cancelled?
Are they full scans or quick scans?
Do you have both quick and full scans configured?
