Updating Defender automatically without automatic downloads

Topic

New Reply

I like the Windows Defender but I cannot seem to figure out using the task scheduler how to download updates daily and do a simple scan at night. Right now the only way that I have found to get automatic updates is to use the Windows Update option — Install updates automatically. I prefer the second option of –Download the updates, but let me choose when and whether to install them.

Any thoughts?

Ernie

Reply | Quote

Replies

I had problems with Windows Defender (I assume you are in Windows 8). My thing was that it seemed to be all set up for updating and scanning in Task Scheduler, but I picked up some malware.

I then cleaned the computer using Comodo Cleaning Essentials, and I disabled 3rd Party browser objects. After doing that, I installed Vipre Internet Security (not the best, but I have a license to it, so I figured I’d use it). This was about a month ago, and I haven’t had any problems since.

It truly amazes me why Microsoft felt that they should remove the schedule functionality from Windows Defender, and force you to set all that up via Task Scheduler. I kind of thought that they were trying to make Windows 8 easier than previous versions. I’m not sure if a casual user could figure it out.

Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server

Reply | Quote

It truly amazes me why Microsoft felt that they should remove the schedule functionality from Windows Defender, and force you to set all that up via Task Scheduler. I kind of thought that they were trying to make Windows 8 easier than previous versions. I’m not sure if a casual user could figure it out.

The Microsoft default is for Windows Updates (which include Windows Defender definition updates) to be downloaded and installed automatically. This is seldom changed by the casual user.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Windows Update Notifier has an option for “Install Windows Defender updates automatically”; which I use and it seems to work fine.

Bruce

Reply | Quote

Windows Defender can be scheduled for daily signature updates using Task Scheduler. I put mine in the Microsoft/Windows/Windows Defender section of Task Scheduler.

Click on “Create Task”, name it what you like (mine is Daily Signature Update), set the trigger as the time you want it to run every day.

For Action browse to Program FilesWindows DefenderMpCmdRun.exe and select it. In “Add arguments” add -SignatureUpdate -MMPC

The “MMPC” performs the update directly from Microsoft Malware Protection Center. And it runs very quickly, so I didn’t put a check by “Start the task only if the computer is idle for:”

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Thanks bbearren. A step by step description may help others with this problem as well.

Reply | Quote

Thanks bbearren. A step by step description may help others with this problem as well.

A shortcut to Task Scheduler can be found in Control Panel > Administrative Tools. Or, on the Start Screen, type “tasks”, click on “Settings”, then “Schedule tasks” to open Task Scheduler, which runs on the Desktop.

Task Scheduler must be “Run as administrator” in order to schedule this task successfully.

In the left pane of Task Scheduler, expand “Task Scheduler Library”, expand “Microsoft”, and expand “Windows”. Scroll down the list of folders to “Windows Defender”, and click on that folder. In the center pane is a listing of all the tasks scheduled by default for Windows Defender. (One of these is “Windows Defender Scheduled Scan”, which is a daily quick scan that runs when the PC is left idle for 10 minutes, and is interrupted if the idle state is interrupted.) Leave these as they are, and in the right pane, click on “Create Task”.

This will open a dialog box with tabs for “General”, “Triggers”, “Actions”, “Conditions”, and “History”. In the “General” tab, give your task a name in the Name box. Mine is “Daily Signature Update”. Note that “Location:” is already filled in as “MicrosoftWindowsWindows Defender”; leave that as it is. A “Description” can be added, but isn’t necessary.

Under “Security options”, click on the button “Change User or Group…”. In the “Select User of Group” dialog that pops up, type “system” in the box for “Enter the object name to select”, then click the button “Check Names”. This will reformat “system” into the Windows way of names, and will be changed to “SYSTEM“. Click OK on that box, and “SYSTEM” is transformed once more to “NT AUTHORITYSYSTEM”.

Next, put a check by “Run with highest privileges”, and using the dropbox by “Configure for:” select “Windows 8”, then click on the “Triggers” tab.

At the bottom of the “Triggers” tab, click the “New…” button. In the “New Trigger” dialog box that pops up, put a tick in the radio button for “Daily”. “Start” will be pre-filled the current date and time. Change the “Start” time to whatever you like. Bear in mind that ff you hibernate or sleep your PC rather than turn it off, this can be any time. If you turn your PC off, this should be a time when the machine will be running. “Enabled” will have a check by it, and everything else on the “New Trigger” tab can be left as is.

Click the “Actions” tab and the “New…” button at the bottom. In the “New Action” dialog box, “Start a program” will be pre-filled beside “Action”; leave that as is. By the “Program/script” textbox, click the “Browse” button and navigate to “Program FilesWindows Defender”, highlight “MpCmdRun.exe” and click the “Open” button. In the “Add arguments (optional):” textbox type “-SignatureUpdate -MMPC” (without the quotes), then click OK.

On the “Condiditons” tab, leave the box unchecked by “Start the task only if the computer is idle for:” because this is a background task that happens very quickly. If you hibernate/sleep your PC rather than turning it off, put a check by “Wake the computer to run this task”. Under “Network”, put a check in the box, and leave “Any connection” as the available connection.

In the “Settings” tab be sure there’s a check by “Allow task to be run on demand”, and “Run task as soon as possible after a scheduled start is missed”. The rest can be left as is.

Click OK, and you’re finished. Windows Defender definitions will be updated every day at the time you selected.

My PC is left on 24/7, and my daily update is scheduled for 6:00 AM.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Thanks for your detailed instructions.
I now have it updating daily without having to remember to go to windows update.
Don’t know why Microsoft didn’t include this process as part of the program.

A friend and I run a Win8 SIG in our local Users Group and I’ll make sure this gets to my group

Ernie

Reply | Quote

I, too, appreciate the detailed instructions. My question is, for those of us who hibernate overnight or when not using the computer, why would we want to wake the computer to do this, if we have checked the box telling Task Scheduler to run the task ASAP if missed? As far as I know, Windows won’t shut the computer off again after completing the scheduled task.

Thanks in advance.

Reply | Quote

I, too, appreciate the detailed instructions. My question is, for those of us who hibernate overnight or when not using the computer, why would we want to wake the computer to do this, if we have checked the box telling Task Scheduler to run the task ASAP if missed?

You don’t have to. The instructions are a general guideline for setting up the task. Set the Conditions to suit your own needs.

As far as I know, Windows won’t shut the computer off again after completing the scheduled task.

It is my understanding that Windows returns to its previous power state once a scheduled task is completed. I’ll have to double-check this for confirmation.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

It is my understanding that Windows returns to its previous power state once a scheduled task is completed. I’ll have to double-check this for confirmation.

I edited one of my scheduled tasks for “Wake” and tried “Sleep” last night to see the result. My PC was awake this morning, meaning it didn’t return to “Sleep” after the task ran. I haven’t tried “Hibernate” yet.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

It is my understanding that Windows returns to its previous power state once a scheduled task is completed. I’ll have to double-check this for confirmation.

I perform a lot of database backups through scheduled tasks. These tasks wake up my desktop from sleep. I have been doing it for years and I have never seen Windows going back to “sleep” mode.

Reply | Quote

bbearren,
Have tried to create this task 3 times now following your instructions to the letter (I believe). When I try to run it I get an error that the specified file cannot be found.
Windows Defender runs fine and updates through Windows Update with no problems.
Any idea on what the problem might be?

34239-Capture

Rich

Reply | Quote

How about posting a picture of the actions tab?

Joe

--Joe

Reply | Quote

34240-Capture

Rich

Reply | Quote

Rich,

I always start Task Scheduler using “Run as administrator”, but I notice I didn’t put that in the instructions. And I don’t know if that would make a difference, since yours shows up as a scheduled task.

The only other thing that comes to mind is the “Conditions” tab, and whether you have a check in the Network box and “Any connection” selected, since one “file specified”, the signatures file, is actually on the Microsoft Malware Protection Center (MMPC).

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

bbearren,
I didn’t run as administrator but everything is as specified.
I couldn’t make out if there is a space between SignatureUpdate and -MMPC but I tried it both ways.
I will delete the task and recreate as an administrator when I get back to my laptop.

I thank you and Joe for the quick responses. Will let you know if that was the problem.

Rich

Reply | Quote

Yes, there is a space between -SignatureUpdate and -MMPC.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

I always start Task Scheduler using “Run as administrator”,

That’s what I needed to do. I run all of my utility programs and some others as administrator but it never occurred to me to run Task Scheduler that way.

Thanks again,
Rich

Reply | Quote

That’s what I needed to do. I run all of my utility programs and some others as administrator but it never occurred to me to run Task Scheduler that way.

Thanks again,
Rich

Thanks, Rich. I’ll edit my instructions to reflect that.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Funny how sometimes the simple solutions can be elusive. To get the PC to go back to sleep after completing the task which awakened it, go to Control Panel > Power Options and on the left side click on “Change when the computer sleeps”. I used 20 minutes to test my hypothesis.

Works like a charm. I put the PC to sleep, Task Scheduler awakened it to update the Windows Defender Signatures, and the PC put itself back to sleep.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

For those wanting to improve (somewhat) on Windows Defender in Windows 8 on x86/x64 (not ARM or RT version), Avast Free Edition works well for me. Except that it does slow down Chrome page loads, especially secure sites. And it can slow initial launching of a user account.

While researching, I found that Avast got better detection and removal ratings than Windows Defender. I have used Avast in Windows 8 Pro successfully for several months now. Updating Avast is automatic, and totally independent of Windows Updates.

I have Microsoft Updates set up to only notify me when new updates are available. Then I decide what and when to update (see Susan Bradley’s Patch Watch Column for guidance). I’ve been burned by Automatic Updates too many times to let Microsoft decide how to update my computers.

-- rc primak

Reply | Quote

I also have Windows Update set for notify only, but I usually install all updates. I just don’t want Windows to ask me to reboot when I’m in the middle of something.

As for Windows Defender, I’ve used MSE in Windows 7 and Windows Defender in Windows 8 Pro exclusively for real time protection, with an occasional Malwarebytes scan, and I’ve not had any problems. Of course, we all have our favorites and our own reasons for doing the things we do the way we do them.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

I just don’t want Windows to ask me to reboot when I’m in the middle of something.

Windows 8 will only do that once a month, then give you three days to get around to it, followed by a 15 minute warning:

Minimizing restarts after automatic updating in Windows Update

Bruce

Reply | Quote

Windows 8 will only do that once a month, then give you three days to get around to it, followed by a 15 minute warning:

My point is that I don’t want it to do that at all, regardless of the time frame.

we all have … our own reasons for doing the things we do the way we do them.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

I’m with bbearren. I have Windows set to notify simply to control when the updates are installed. I always install them and have never had a problem. As I said in another post, a failed Windows Update is usually (I’ve learned never to say always) caused by some form of corruption in the OS that I prefer to fix. A prime example is the .net update failures caused by a corrupted installation of .net.

Jerry

Reply | Quote

I’m with bbearren. I have Windows set to notify simply to control when the updates are installed. I always install them and have never had a problem. As I said in another post, a failed Windows Update is usually (I’ve learned never to say always) caused by some form of corruption in the OS that I prefer to fix. A prime example is the .net update failures caused by a corrupted installation of .net.

Jerry

I disagree.

You only have to look over the past six months of AskWoody.com or Susan Bradley’s Patch Watch Column to see widespread issues with a few MS Updates. I had a few of these issues myself, and there was no obvious system corruption or third-party security conflict. Sometimes there’s an OEM System File which should not be altered due to manufacturer hardware issues. Sometimes it’s a driver conflict. Other times MS sends a patch down the chute which should be regarded as optional, but it would install automatically if the settings are that way. One recent Windows 7 Platform Upgrade wrecked a lot of perfectly good systems with particular graphics setups before it was withdrawn. With MS Updates burrowing deeper and deeper into the System Kernel these days, anything can happen, even in a perfect, pristine system.

With a few experts watching for significant patching issues, I am able to avoid being one of the “pioneers” who keep getting the arrows in their backs. But I do thank those who take every update as it is offered — without you folks, I’d never know which patches to postpone or skip. To those who have never had a Windows patch go wrong I say, you are luckier folks than I am!

-- rc primak

Reply | Quote

But I do thank those who take every update as it is offered — without you folks, I’d never know which patches to postpone or skip. To those who have never had a Windows patch go wrong I say, you are luckier folks than I am!

No need to thank me, Bob. Since I’ve had no trouble with any update, I can’t have made any contributions on that front. The updates have all worked for me.

Which is not to say that Susan’s column is of little use; she performs a great service for those who must look after a number of machines, not just their own. But I perform routine drive imaging, and have no fear of fouling something up that I can’t quickly undo.

Of course that’s my main reason for drive imaging; the ability to fully recover from any calamity. That’s also the reason so many of us encourage everyone to separate their data from their system via partitioning, and to get into a routine regimen/habit of backing up both system and data.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Couldn’t have said it better Bbearen. There’s nothing wrong with Bob’s methodology. Fred and Dr Who don’t apply any updates and it seems to work for them.

My own personal opinion is that Microsoft issues critical Windows Updates for a reason and I want to apply them as soon as possible. As I’ve stated, I’ve never had a problem but if I did, a simple System Restore or if that fails, an image restore would get me back to where I started.

When I get a PC to work on, the first thing I do is to create an image backup. Then I do a malware scan followed by Windows Update. I have seen failures in this case but its always caused by system corruption that I fix. i think my clients are best served by a system that is completely up to date with Microsoft Updates.

Jerry

Reply | Quote

No need to thank me, Bob. Since I’ve had no trouble with any update, I can’t have made any contributions on that front. The updates have all worked for me.

Which is not to say that Susan’s column is of little use; she performs a great service for those who must look after a number of machines, not just their own. But I perform routine drive imaging, and have no fear of fouling something up that I can’t quickly undo.

Of course that’s my main reason for drive imaging; the ability to fully recover from any calamity. That’s also the reason so many of us encourage everyone to separate their data from their system via partitioning, and to get into a routine regimen/habit of backing up both system and data.

Couldn’t have said it better Bbearen. There’s nothing wrong with Bob’s methodology. Fred and Dr Who don’t apply any updates and it seems to work for them.

My own personal opinion is that Microsoft issues critical Windows Updates for a reason and I want to apply them as soon as possible. As I’ve stated, I’ve never had a problem but if I did, a simple System Restore or if that fails, an image restore would get me back to where I started.

When I get a PC to work on, the first thing I do is to create an image backup. Then I do a malware scan followed by Windows Update. I have seen failures in this case but its always caused by system corruption that I fix. i think my clients are best served by a system that is completely up to date with Microsoft Updates.

Jerry

We all have our preferred ways of dealing with Microsoft (or any) updates.

Drive Imaging is a first priority with me also. But I find it’s better and less of a hassle to avoid bad patches in the first place than to recover from them later.

Postponing even most of the most “critical” of Microsoft’s recent patches has not resulted in any infections or instabilities on any of my Windows installations, as long as I apply each month’s patches before the next Patch Tuesday comes out.

Woody’s approach works the best for me. Susan’s recommendations can leave patches not applied for many months, and unless you’re a System Administrator or something like that, this seems to me to be too long to wait. There’s also the risk of great confusion when Susan finally gives the Install recommendation to some long-forgotten KB Number.

As I say, what works for one does not always work for all. Each of us should patch as we feel comfortable, and only hold off if we feel we know enough and are going to be vigilant enough to eventually apply all necessary Microsoft patches.

As one who has had more than a few issues with MS patches, I recommend waiting for the all-clear from my trusted sources. While no one else needs to follow my advice, that is where I stand on patching.

Unlike some Lounge members, I am not confident enough in my own skills to avoid all patching altogether. In fact, when Windows XP ends security updates, I will retire my own Windows XP computer in all likelihood, saving the hard drive (in an enclosure) only for data recovery when and if it may ever be needed.

-- rc primak

Reply | Quote