Defender ScanScheduleQuickScanTime vs ScanScheduleTime

Question

Defender ScanScheduleQuickScanTime vs ScanScheduleTime

Handian Sudianto 6,106

Hello what different between ScanScheduleQuickScanTime and ScanScheduleTime on windows defender?

1 answer

Your answer

Answer 1

Marilee Turscak-MSFT 37,206 Microsoft Employee Moderator

@Handian Sudianto ,

ScanScheduleQuickScanTime takes a DateTime, but ScanScheduleTime takes an integer. ScanScheduleTime appears in documentation for Windows Server 2022. For Windows 10, there is also a parameter called ScanScheduleOffset that takes an integer.

Definitions from the documentation:

ScanScheduleQuickScanTime

Specifies the time of day, as the number of minutes after midnight, to perform a scheduled quick scan. The time refers to the local time on the computer. If you do not specify a value for this parameter, a scheduled quick scan runs at the time specified by the ScanScheduleOffset parameter. That parameter has a default time of two hours after midnight.

ScanScheduleTime

Specifies the time of day to run a scheduled scan. The time refers to the local time on the computer. Specify the number of minutes after midnight (for example, enter 60 for 1 a.m.). This parameter has a default time of two hours after midnight (2 a.m.).

https://learn.microsoft.com/en-us/powershell/module/defender/set-mppreference?view=windowsserver2022-ps

Related discussion here as well:

https://serverfault.com/questions/1100713/using-set-mppreference-to-schedule-windows-full-and-quick-scans-doesnt-work

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

Handian Sudianto 6,106 Reputation points

2023-11-28T01:03:50.4866667+00:00

Hello @Marilee Turscak-MSFT

here my defender configuration, on this pic we can see the defender will run 'Quick Scan' for 'Everyday' and i confuse what time the quick scan will be started? Will started on 00:00:00 or 02:00:00
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-12-01T00:38:16.7466667+00:00

My understanding of this is that the Quick Scan will start at 00:00:00 (midnight) and the full scan which scans every file will start at 02:00:00 (2:00AM). One is a partial scan and one is full.

It might be worth confirming that with the Windows team as well as this is related to Windows Defender rather than Defender for Cloud. https://answers.microsoft.com/en-us/windows/forum
Handian Sudianto 6,106 Reputation points

2023-12-01T00:41:43.97+00:00

Hello,

Sure i will post there.
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-12-01T20:10:21.6233333+00:00

@Handian Sudianto ,

I found this which may also help and confirms my understanding.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/schedule-antivirus-scans?view=o365-worldwide
Handian Sudianto 6,106 Reputation points

2023-12-02T02:35:53.4833333+00:00

Hi, that article not answer my question i guess. Previously you say "My understanding of this is that the Quick Scan will start at 00:00:00 (midnight) and the full scan which scans every file will start at 02:00:00 (2:00AM). One is a partial scan and one is full." So even i have set scan to run quick scan only by set scan parameter to 1, this mean full scan still be run everyday also at 02.00?

Share via

Defender ScanScheduleQuickScanTime vs ScanScheduleTime

1 answer

Your answer