This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Applies to:
You can use Group Policy, PowerShell, and Windows Management Instrumentation (WMI) to configure Microsoft Defender Antivirus scans.
| Article | Description |
|---|---|
| Configure and validate file, folder, and process-opened file exclusions in Microsoft Defender Antivirus scans | You can exclude files (including files modified by specified processes) and folders from on-demand scans, scheduled scans, and always-on real-time protection monitoring and scanning |
| Configure Microsoft Defender Antivirus scanning options | You can configure Microsoft Defender Antivirus to include certain types of email storage files, back-up or reparse points, and archived files (such as .zip files) in scans. You can also enable network file scanning |
| Configure remediation for scans | Configure what Microsoft Defender Antivirus should do when it detects a threat, and how long quarantined files should be retained in the quarantine folder |
| Configure scheduled scans | Set up recurring (scheduled) scans, including when they should run and whether they run as full or quick scans |
| Configure and run scans | Run and configure on-demand scans using PowerShell, Windows Management Instrumentation, or individually on endpoints with the Windows Security app |
| Review scan results | Review the results of scans using Microsoft Endpoint Configuration Manager, Microsoft Intune, or the Windows Security app |
Tip
Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.
Training
Module
MD-102 2-Manage Microsoft Defender for Endpoint - Training
This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
Certification
Microsoft Certified: Security Operations Analyst Associate - Certifications
Investigate, search for, and mitigate threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender.
Documentation
Run and customize on-demand scans in Microsoft Defender Antivirus - Microsoft Defender for Endpoint
Run and configure on-demand scans using PowerShell, Windows Management Instrumentation, or individually on endpoints with the Windows Security app
Review the results of Microsoft Defender Antivirus scans - Microsoft Defender for Endpoint
Review the results of scans using Microsoft Endpoint Configuration Manager, Microsoft Intune, or the Windows Security app
Understand when and how to use full scans with Microsoft Defender Antivirus.