ScheduleTime

ScheduleTime specifies the time of day when Microsoft Defender will run a scheduled full scan in order to complete remediation.

Values

<Time>

Specifies <time> as a number represented as the number of minutes past midnight:

  • The range is 0-1440

  • The default value is 120 (0x78)

  • The schedule is based on local time on the computer where the full scan will run.

For example, 120 (0x00000078) is equivalent to 02:00 AM in the local time on the computer where the full scan will run.

Valid Configuration Passes

oobeSystem

offlineServicing

specialize

Parent Hierarchy

Security-Malware-Windows-Defender | Scan | ScheduleTime

Applies To

For Windows Windows Server 2016 editions, Microsoft Defender is installed with the operating system.

For Windows Server 2012, Windows Server 2008 R2 and Windows Server 2008, Microsoft Defender is installed with the Desktop Experience Pack.

For a full list of the Windows editions and architectures that this component supports, see Security-Malware-Windows-Defender.

XML Example

The following XML output shows how to specify that Microsoft Defender will run a scan at 02:00 AM in the local time on the computer on the day as specified by ScheduleDay.

<ScheduleTime>120</ScheduleTime>

Security-Malware-Windows-Defender

ScheduleDay