Defender Report

Question

Hi All,

Need some advice on below

1. I have deployed Defender Antivirus Policy from Group policy to Servers and Few Windows 10 machines. Where can i see the anti virus definition update status for all clients? Just to check if all are getting updated
2. In Defender Portal, under reports i can see few reports for threat protection, device compliance, Vulnerable devices. Is there a way to schedule a report to be forwarded to specific email IDs

Answer 1

Use Group Policy settings to configure and manage Microsoft Defender Antivirus

Answer 2

In case you use Microsoft Endpoint Manager or Configuration Manager, you are able to view report of your endpoints such as status of signature, scans and so on. Such ability is not available out of the box using the Group Policy. However, you may check such information in the Event Viewer, for each endpoint.
Using Group Policy, you only have options to manage them, but you don't have such dashboard.
To learn more, have a look at:
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configuration-management-reference-microsoft-defender-antivirus