Can scans in Windows Defender be automated?

Topic

New Reply

Currently, every so often my alert icon 44208-alert changes to 44209-alert just to tell me Windows Defender wants a scan.

Unlike other anti-malware, which lets one configure a time and interval to scan, I can’t find a setting to do this.

Is there a way to set this up, or does Windows just get dumber as it grows?

Reply | Quote

Replies

See the discussion at this Microsoft Answers thread – Windows 10, How do I set Windows Defender’s scan schedule?.

Joe

--Joe

Reply | Quote

Thanks, Joe.
I read the material in the links, then went to Task Scheduler and found that it is set up to scan every day at 3:00 am.
But if it’s working, why would my alert tell me I need a scan this afternoon?

Reply | Quote

Is the PC on at 3 am?

Joe

--Joe

Reply | Quote

Yes, the PC is on 24/7.

But now that I look at the Task Scheduler again, I think that the Windows Defender task is to update the definitions, not to start a scan.

Looking in the Program Files folder for Windows Defender, I didn’t see an executable for the scan function, so I’m not sure how to initiate a scan on the scheduler.

Reply | Quote

I updated the sticky Windows Defender Automatic Update, Scheduled Scans a week ago (to include Windows 10 in the list of applicable OS’s).

“Bear in mind that if you sleep your PC rather than turn it off, this can be any time. If you turn your PC off, this should be a time when the machine will be running.”

>>>edit: I just realized I had also said “hibernate”—Task Scheduler won’t wake a PC from hibernation. Corrected in the linked post also. /<<<edit

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

If you open Task Scheduler using “Run as administrator” you should be able to navigate to Task Scheduler (Local)/Task Scheduler Library/Microsoft/Windows/Windows Defender in the left pane.

Clicking on Windows Defender in the left pane, in the center pane you should see 4 tasks,
Windows Defender Cache Maintenance
Windows Defender Cleanup
Windows Defender Scheduled Scan
Windows Defender Verification

Are you looking in the right place?

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Thanks bbearren. In Task Scheduler, when I went to Microsoft/Windows, there was no WindowsDefender.

Trying to see all sheduled tasks, I got this pop-up: “Task scheduler not available” I waited, but nothing happened. Now I’m even more confused.

44222-t-s-error

Reply | Quote

Thanks bbearren. In Task Scheduler, when I went to Microsoft/Windows, there was no WindowsDefender.

Trying to see all sheduled tasks, I got this pop-up: “Task scheduler not available” I waited, but nothing happened. Now I’m even more confused.

44222-t-s-error

I suggest a reboot, then try Task Scheduler again. If that doesn’t work, I would run sfc /scannow from an elevated Command Prompt.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

bbearen, I looked there and can see the entries you mention. Last run was this morning at 0855, but next run time is blank. Where is this time stored? My PC is on 24/7 (on my brand new UPS!)

Eliminate spare time: start programming PowerShell

Reply | Quote

bbearen, I looked there and can see the entries you mention. Last run was this morning at 0855, but next run time is blank. Where is this time stored? My PC is on 24/7 (on my brand new UPS!)

The Windows Defender Scheduled Scan does not have a time trigger, so there won’t be a time listed for a next run. It also shows no trigger (looking in the Properties for the task) listed, so my assumption is that some sort of algorithm is used to run a quick scan roughly once a day when the PC is on but is not in use.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

The Windows Defender Scheduled Scan does not have a time trigger, so there won’t be a time listed for a next run. It also shows no trigger (looking in the Properties for the task) listed, so my assumption is that some sort of algorithm is used to run a quick scan roughly once a day when the PC is on but is not in use.

From the link in post #2:

So this is where you have to go now to change the schedule for the Windows Defender Scheduled Scan task:
Right-click on the Start button and choose Control Panel > Security and Maintenance > Maintenance > Change maintenance settings.

Reply | Quote

The Windows Defender Scheduled Scan does not have a time trigger, so there won’t be a time listed for a next run. It also shows no trigger (looking in the Properties for the task) listed, so my assumption is that some sort of algorithm is used to run a quick scan roughly once a day when the PC is on but is not in use.

From the link in post #2:

So this is where you have to go now to change the schedule for the Windows Defender Scheduled Scan task:
Right-click on the Start button and choose Control Panel > Security and Maintenance > Maintenance > Change maintenance settings.[/QUOTE]
Doesn’t mean that Windows Defender Scheduled Scan will necessarily run at that time, nor any of the other tasks, for that matter. There are a number of other maintenance tasks that aren’t listed, and no way of knowing which starts when. There are various conditions polled by the OS that determine what runs and when it starts. From my Windows 10 NAS:

44224-Scheduled-Maintenance

44225-Maintenance-Run-Time

Note that scheduled Maintenance is set for 2:00 AM. Windows Defender Scheduled Scan ran 4/16/2016 at 1:19:59 PM. The NAS was turned on but not logged on, and not in use by me at 2:00 AM yesterday right up until I logged on to take those snips.

At the moment it has a restart scheduled at 3:15 AM for a Windows Update. I’ll check tomorrow to see when the Scheduled Scan actually runs. The link in post #5 is to a sticky that has instructions on how to setup Task Scheduler for Windows Defender Signature Updates and Scans to run on an actual schedule, if one so desires.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Note that scheduled Maintenance is set for 2:00 AM. Windows Defender Scheduled Scan ran at 1:19:59 PM yesterday. The NAS was turned on but not logged on, and not in use by me at 2:00 AM yesterday right up until I logged on to take those snips.

Doesn’t mean that it didn’t run at 2:00 AM.

What time is set for your additional daily quick scan scheduled task?

Reply | Quote

Doesn’t mean that it didn’t run at 2:00 AM.

What time is set for your additional daily quick scan scheduled task?

I think it does. I checked it earlier today, and it had not yet run again; last run time was still 4/16/2016 1:19:59 PM. I checked again a few minutes ago, and the last run time was 4/17/2016 8:33:43 AM, which means (for me, anyway) that it definitely did not run at 2:00 AM this morning; others may interpret that information differently.

There are no additional scheduled tasks on my Windows 10 NAS. I chose to let Windows defaults run everything except for the RAID 10 Array, which is configured via the motherboard UEFI and monitored by Intel RST. The OS is installed on a 120GB mSATA SSD.

My main desktop, OTOH, has scheduled tasks for Signature Update (5:15 AM), Daily Quick Scan (8:00 AM), and Weekly Full Scan (12:00 PM every Wednesday). Those run on my schedule, and the default Windows Defender Scheduled Scan doesn’t run at all.

Automatic Maintenance is scheduled for 2:00 AM. It’s showing “Last run date: 4/17/2016 8:37 AM”.

“There are a number of other maintenance tasks that aren’t listed, and no way of knowing which starts when. There are various conditions polled by the OS that determine what runs and when it starts.”

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

My main desktop, OTOH, has scheduled tasks for Signature Update (5:15 AM), Daily Quick Scan (8:00 AM), and Weekly Full Scan (12:00 PM every Wednesday). Those run on my schedule, and the default Windows Defender Scheduled Scan doesn’t run at all.

Automatic Maintenance is scheduled for 2:00 AM. It’s showing “Last run date: 4/17/2016 8:37 AM”.

Doesn’t mean that it didn’t run at 2:00 AM.

”There are a number of other maintenance tasks that aren’t listed, and no way of knowing which starts when. There are various conditions polled by the OS that determine what runs and when it starts.”

Why quote yourself without further explanation?

What list? Which other tasks? What conditions?

Reply | Quote

Rebooted, ran sfc/scannow. Same pop-up.
I can schedule a new task, but can’t find Windows Defender scan in the tasks.

Reply | Quote

Rebooted, ran sfc/scannow. Same pop-up.
I can schedule a new task, but can’t find Windows Defender scan in the tasks.

If you’re getting the same pop-up that says “Task scheduler service is not available”, I don’t quite understand how you’re able to schedule a new task. Can you elaborate on that?

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

A WD scan is now part of scheduled maintenance. Read the thread linked in post #2 (and its links).

Joe

--Joe

Reply | Quote

My main desktop, OTOH, has scheduled tasks for Signature Update (5:15 AM), Daily Quick Scan (8:00 AM), and Weekly Full Scan (12:00 PM every Wednesday). Those run on my schedule, and the default Windows Defender Scheduled Scan doesn’t run at all.

Automatic Maintenance is scheduled for 2:00 AM. It’s showing “Last run date: 4/17/2016 8:37 AM”.

Doesn’t mean that it didn’t run at 2:00 AM.[/QUOTE]
It probably does. “Windows Automatic Maintenance minimizes impact to the PC by scheduling maintenance only when the PC is on and idle. By default, the system performs maintenance daily, starting at 3 AM. (Note that the user may re-schedule when the maintenance occurs.) This daily session is limited to a maximum duration of 1 hour per attempt.”

If scheduled maintenance has not completed within the hour, “the scheduler extends the duration of the maintenance window in order to complete the delayed task. If the system still cannot complete the task, the Action Center displays a warning notification to the user. The user can then manually initiate the maintenance action from the Action center.” I have a number of defined scheduled tasks on my desktop that may well be interfering with Automatic Maintenance, and it doesn’t get a chance to start at 2:00 AM.

OTOH the title of the OP is “Can scans in Windows Defender be automated?” It begins with the statement, “Currently, every so often my alert icon 44208-alert changes to 44209-alert just to tell me Windows Defender wants a scan.” That means specifically that the Windows Defender Scheduled Scan did not run during the last Automatic Maintenance daily cycle, but it does not give an explanation. Yes, scans are “automated” in that they are part of Automatic Maintenance, but that does not guarantee that they will run each and every day without fail; hence the OP.

In order to optimize one’s use of Task Scheduler, it is most helpful to click “Enable All Tasks History” in the right-hand pane. The only history initially will be “Task registration updated”, which was enabling all tasks history. After a day or so, there will be plenty. Opening Task Scheduler (Local) > Task Scheduler Library > Microsoft > Windows > Windows Defender, right-clicking on Windows Defender Scheduled Scan in the center pane, selecting Properties and then the History tab the reason for the OP’s question may well be that “one or more conditions were not met”. “Launch condition not met, machine not idle” is another explanation. Indications for the OP’s question are that it has been more than 24 hours since a Windows Defender scan. Being able to see a task’s history can be quite helpful in troubleshooting the reason(s) for it not completing successfully.

In answer to the OP, following the instructions at Windows Defender Automatic Update, Scheduled Scans “can define a task with a deadline. A deadline is defined as a recurring time frame in which the system must successfully perform the task at least once.” That will set a higher priority for the scheduled task than the priority for Automatic Maintenance. The scan will indeed run, and seeing 44209-alert won’t be because Windows Defender needs to scan; it will be for some other reason.

”There are a number of other maintenance tasks that aren’t listed, and no way of knowing which starts when. There are various conditions polled by the OS that determine what runs and when it starts.”

Why quote yourself without further explanation?[/QUOTE]
Actually, I was repeating myself.

What list? Which other tasks? What conditions?

“At specific times when your computer is idle, Windows automatically initiates a bunch of tools that maintain the stability of your computer. The tools perform a wide variety of tasks including software updates, checking for solutions to Windows problems via the Error Report tool, optimizing Windows services via the .NET optimization service and defragging your hard disks.” Many of the tasks in Task Scheduler are Automatic Maintenance tasks.

The primary condition for Automatic Maintenance tasks is an idle PC that is powered on. All Automatic Maintenance tasks must be suspendible/resumable. If the user ends the idle condition, the task is suspended until the idle condition returns. There are also “wait for idle” conditions; wait 10 minutes is fairly standard. The daily cycle is another condition; when was the task last run?

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote