Skip to content

Commit 7981fae

Browse files
committed
Update troubleshoot-security-intelligence-not-updated.md
1 parent 1dd007b commit 7981fae

File tree

1 file changed

+14
-12
lines changed

1 file changed

+14
-12
lines changed

defender-endpoint/troubleshoot-security-intelligence-not-updated.md

Lines changed: 14 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -54,22 +54,24 @@ The following screenshot shows the error **Signature Update failed**.
5454

5555
1. Check the URLs required for the Security intelligence updates. You can get them via the firewall and/or proxy. See [Configure your network environment to ensure connectivity with Defender for Endpoint service](configure-environment.md).
5656

57-
1. Ensure that Microsoft Defender Antivirus (MDAV) is your primary antivirus. If you have a third-party antivirus that uses the Windows Security Center (WSC) API, it will disable MDAV. When MDAV is disabled, updates can't occur.
57+
1. Ensure that Microsoft Defender Antivirus is your primary antivirus. If you have a non-Microsoft antivirus solution that uses the Windows Security Center (WSC) API, it disables Microsoft Defender Antivirus. When Microsoft Defender Antivirus is disabled, updates can't occur.
5858

59-
1. Given that MDAV is the primary antivirus and the services are running:
59+
1. Given that Microsoft Defender Antivirus is the primary antivirus and the services are running, follow these steps:
6060

61-
1. Check if updating Security Intelligence works when you manually download from [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware?](https://www.microsoft.com/wdsi/defenderupdates)
61+
1. Check if updating Security Intelligence works when you manually download from [Latest security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware?](https://www.microsoft.com/wdsi/defenderupdates)
6262

63-
1. If so, try updating through the Microsoft Malware Protection Center (MMPC).
63+
2. If so, try updating through the Microsoft Malware Protection Center (MMPC).
6464

65-
Run the following PowerShell command as an administrator.
65+
Run the following PowerShell command as an administrator.
6666

67-
```powershell
68-
& "${env:ProgramFiles}\Windows Defender\MpCmdRun.exe" -SignatureUpdate -MMPC
69-
```
67+
```powershell
68+
& "${env:ProgramFiles}\Windows Defender\MpCmdRun.exe" -SignatureUpdate -MMPC
69+
```
7070
71-
1. If this command works, the issue might be that the Security intelligence [Fallback order](manage-protection-updates-microsoft-defender-antivirus.md#fallback-order) is set to a WSUS server without **Security intelligence** approved updates. Alternatively, the UNC share might be stale, or the Windows Update service might have issues.
71+
3. If this command works, the issue might be that the Security intelligence [Fallback order](manage-protection-updates-microsoft-defender-antivirus.md#fallback-order) is set to a WSUS server without **Security intelligence** approved updates. Alternatively, the UNC share might be stale, or the Windows Update service might have issues.
7272
73-
1. To check the WSUS server that the machine goes to, review `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer (REG_SZ)`. Once you find the WUServer, check if that WSUS server has the MDAV security intelligence [(KB2267602 for MDAV and KB2461484 for SCEP)](microsoft-defender-antivirus-updates.md#security-intelligence-updates) approved.
74-
1. To check the UNC share, review [Manage how and where Microsoft Defender Antivirus receives updates](manage-protection-updates-microsoft-defender-antivirus.md#create-a-unc-share-for-security-intelligence-and-platform-updates).
75-
1. To check the status of the Windows Update service, review [Guidance for troubleshooting Windows Update issues](/troubleshoot/windows-client/installing-updates-features-roles/troubleshoot-windows-update-issues) and [Troubleshoot problems updating Windows](https://support.microsoft.com/windows/troubleshoot-problems-updating-windows-188c2b0f-10a7-d72f-65b8-32d177eb136c).
73+
1. To check the WSUS server that the machine goes to, review `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer (REG_SZ)`. Once you find the WUServer, check if that WSUS server has the MDAV security intelligence [(KB2267602 for MDAV and KB2461484 for SCEP)](microsoft-defender-antivirus-updates.md#security-intelligence-updates) approved.
74+
75+
2. To check the UNC share, review [Manage how and where Microsoft Defender Antivirus receives updates](manage-protection-updates-microsoft-defender-antivirus.md#create-a-unc-share-for-security-intelligence).
76+
77+
3. To check the status of the Windows Update service, review [Guidance for troubleshooting Windows Update issues](/troubleshoot/windows-client/installing-updates-features-roles/troubleshoot-windows-update-issues) and [Troubleshoot problems updating Windows](https://support.microsoft.com/windows/troubleshoot-problems-updating-windows-188c2b0f-10a7-d72f-65b8-32d177eb136c).

0 commit comments

Comments
 (0)