WSUS and Microsoft Defender Antivirus updates

Topic

New Reply

I configured the Windows Update policy on our servers for option 3 – Auto-download and notify for install.  Don’t want updates to install automatically, do we? A side effect of this is that Windows Defender signature updates also wait to be installed. But for these updates, I do want them installed automatically. How do I do that?

1 user thanked author for this post.

John

Reply | Quote

Replies

We use ConfigMgr policies to change the update behavior of Windows Defender, including obtaining updates directly from Microsoft.  I believe those settings are available in Group Policy to set the source priority which should overrule the WSUS setting.  Windows components > Windows Defender > Signature updates

Reply | Quote

https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/update-management/deploy-definition-updates-using-wsus

Set up a rule specifically for defender.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote