Policy

Define the order of sources for downloading security intelligence updates

This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares” For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC } If you enable this setting, security intelligence update sources will be contacted in the order specified. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. If you disable or do not configure this setting, security intelligence update sources will be contacted in a default order.

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Defender Antivirus / Security Intelligence Updates
Policy ID 0b3152264d4c
Internal name SignatureUpdate_FallbackOrder

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates\FallbackOrder

Policy notes

This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares” For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC } If you enable this setting, security intelligence update sources will be contacted in the order specified. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. If you disable or do not configure this setting, security intelligence update sources will be contacted in a default order.

Related policies

Allow notifications to disable security intelligence based reports to Microsoft MAPSAllow real-time security intelligence updates based on reports to Microsoft MAPSAllow security intelligence updates from Microsoft UpdateAllow security intelligence updates when running on battery powerAllows Microsoft Defender Antivirus to update and communicate over a metered connection.Check for the latest virus and spyware security intelligence on startupConfigure security intelligence updates according to the scheduler for VDI clients.