Policy

Select the channel for Microsoft Defender daily security intelligence updates

Windows 11 25H2

Back to categoryOpen picker

Policy overview

Key metadata and intent for this policy.

ClassComputer
CategoryWindows Components > Microsoft Defender Antivirus
Supported onAt least Windows Server 2016, Windows 10 Version 1607

Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016

Enable this policy to specify when devices receive Microsoft Defender security intelligence updates during the daily gradual rollout. Current Channel (Staged): Devices will be offered updates after the release cycle. Suggested to apply to a small, representative part of production population (~10%). Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only. If you disable or do not configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices.

Internal name
Root_SecurityIntelligenceUpdateChannel
Policy ID
8afd0ea23cf9
Elements
1

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ElementTypeRegistry mappingConstraints & behavior
Select the channel for Microsoft Defender daily security intelligence updates:
ID UpdateChannelsDropDown
enum
HKLM\Software\Policies\Microsoft\Windows Defender\SignaturesRing
Type REG_DWORD
Options: Current Channel (Staged) (4), Current Channel (Broad) (5)

Other policies in this category

Explore related policies at the same level.

View all policies in this category