Windows 10: Trying to use GPO to do daily full scans with Defender

Hi, using Server 2016 Essentials and 13 Windows 10 Pro 64 bit PC's. Setting GPO to various things works except when I set the WD scheduled daily scan. Options are everyday,Sunday,Monday,..., Never. When I set it to everyday and click OK, it automatically disables the policy *Mad although setting it to a specific day works. However the boss wants a daily full scan ran on all computers.
Has anyone else come across this or is it a know bug that Microsoft should have fixed by now? And is there a feasible (i.e. practical) workaround/solution?

Many thanks
Adrian

:)

 

How to arrange daily or weekly virus search on windows defender for windows 10 by using settings?

Automatic Maintenance is already running a daily Quick Scan that doesn’t require any kind of setup or configuration:

How to schedule Windows defender scan?

Since Windows Defender in Windows 8/8.1/10 has full-fledged real-time protection, there's generally no need to schedule a Full Scan
– but you can schedule a weekly Full Scan in just a few seconds with the command line:

Windows Defender full scan and quick scan

 

Microsoft Windows Defender on Windows 10/ Edge download settings

Microsoft sets system’s automatic maintenance to run Windows Defender's Quick scan as part of daily basis Windows Automatic Maintenance job. There is no need for, and I do not recommend, a daily full system scan. Windows Defender's RTP (Real Time Protection)
and daily Quick Scan takes place of scheduled daily full system scan. This (full scan) takes more computer resources for a long time and slows down your system performance. Microsoft, the system builder and developer, sets all necessary settings of security
and maintenance tasks to give you a best over-all system security and performance for most of its consumers to perform their daily works. If you want, you can run full system scan from time to time (once in a month or several months) manually.

Where can I find automatic system maintenance time and change it to a different time? Can I run it manually?

To change the time and/or run system maintenance manually in Windows 10, open Security and Maintenance window in Windows Control Panel (or type Security and Maintenance in the search box near to the Start menu). Then expand Maintenance section to see the
Automatic Maintenance.

Security and Maintenance -> Maintenance -> Automatic Maintenance

In addition, you can see what tasks are included in the system Automatic Maintenance.

If I want to setup my own schedule full system scan (ex., once every month), how can I perform that?

If you know why you want to setup a custom scan or change the existing daily quick scan to full scan (which is not recommended) and you have a good reason for that, use Task Scheduler service in the Windows Control Panel.

Windows 10: http://windows.microsoft.com/en-us/windows-10/schedule-a-scan-in-windows-defender

Windows 8 (More detailed with screenshots – same steps in Windows 10):

How to schedule a Scan in Windows Defender in Windows 10

 

Windows Defender Security is live on Build 1709.
Anything regarded by WDS as suspect is blocked or is notified as being suspect, this would give you the choice as to whether you wish to open.

 

But it's WD/WDS I'm trying to run!!! More specifically, run at a time when the users are not there. It's the GPO side that seems to be the problem.

Regards
Adrian

 

You mean this GPO?





You could try setting value in the registry. ProcMon indicates it is here:

HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E66B3A5F-1987-43C0-9ED4-44582A3B11A9}Machine\Software\Policies\Microsoft\Windows Defender\Scan

For daily you want to set it daily change the ScheduleDay DWORD to zero (other values in picture above). Then go to gpedit.msc and enable it.

Updating the frequency via regedit works for me but then it also works OK if I set it to daily (i.e. doesn't disable policy) using gpedit.msc. Note I'm using 10 ProWork version 16299.125 not server.

Worth a try though perhaps.