Learn Editor: Update deployment-vdi-microsoft-defender-antivirus.md

Author: YongRhee-MSFT

defender-endpoint/deployment-vdi-microsoft-defender-antivirus.md

@@ -83,7 +83,7 @@ Security intelligence packages are typically published once every three to four
 You can also set up your single server or machine to fetch the updates on behalf of the VMs at an interval and place them in the file share for consumption.
 This configuration is possible when the devices have the share and read access (NTFS permissions) to the share so they can grab the updates. To set this configuration up, follow these steps:
 
- 1. Create an SMB/CIFS file share.
+1. Create an SMB/CIFS file share.
 
  2. Use the following example to create a file share with the following share permissions.
 
@@ -231,6 +231,22 @@ This policy forces a scan if the VM has missed two or more consecutive scheduled
 
 This policy hides the entire Microsoft Defender Antivirus user interface from end users in your organization.
 
+## Run the "Windows Defender Cache Maintenance" scheduled task
+
+Optimize the "Windows Defender Cache Maintenance" for non-persistent and/or persistent VDI environments.
+
+1. On the '**master** image' before sealing
+
+1. Open up the **Task Scheduler** mmc (taskschd.msc)
+
+1. Expand **Task Scheduler Library** > **Microsoft** > **Windows** > **Windows Defender**
+
+1. Right-click on **Windows Defender Cache Maintenance**
+
+1. Click on **Run**
+
+1. Let the scheduled task finish
+
 ## Exclusions
 
 If you think you need to add exclusions, see [Manage exclusions for Microsoft Defender for Endpoint and Microsoft Defender Antivirus](defender-endpoint-antivirus-exclusions.md).