Antivirus agent status report has outdated details (old antivirus signature)

Said A 706 Reputation points
2023-07-25T15:57:04.4266667+00:00

Hello everyone,

I have a client that is trying to get reports using the following:

  1. Sign in to the Microsoft Intune admin center.
  2. Select Reports > Microsoft Defender Antivirus to open the default reports view, which is the Summary page. The Summary page displays aggregate details for the Antivirus reports, supports a Refresh, and reflects the data found in Antivirus agent status report.
  3. Select the Reports tab > Antivirus agent status to open the report.
  4. Select Generate report (or Generate again) to retrieve current data.

User's image

The Antivirus "Signature version" that we get from the report is outdated and not correct for most devices.

We have tried the following report, from the security center instead:

  1. Go to https://security.microsoft.com, and sign in.
  2. Choose Reports > Device health  

It generates a real time report of the connected devices with correct Antivirus "Signature version".

Our questions are:

  • Does the Intune report have a definite timeframe where it tries to pull the information from the devices?
  • If not, why aren't the reports from Intune contain the correct or up-to-date details?
  • The second report unfortunately only generates stats and infos from the connected devices at the time.

Thank you for your time.

Regards,

SAID.

Microsoft Intune Reporting
Microsoft Intune Reporting
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Reporting: The process of giving an account of something that has been observed, heard, done, or investigated.
47 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,078 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Catherine Kyalo 160 Reputation points Microsoft Employee
    2024-02-12T14:23:40.45+00:00

    Hi Said A The Antivirus agent status report in Intune is updated every 8 hours for Windows 10 devices and every 24 hours for other Windows devices. If the report is showing outdated information, it's possible that the devices haven't checked in with Intune within that timeframe. Another possibility is that there's a delay in the processing of the report data. As for the Security Center report, it generates real-time data for connected devices, so it will always display the most up-to-date information. However, it doesn't have the same level of detail as the Antivirus agent status report in Intune.

    0 comments No comments