How to Check and Update Microsoft Defender Antivirus on Windows Server
Applies to: Windows Server 2019, 2022 and 2025, subject to installed updates and feature availability.
Defender status should be verified through real-time protection, engine and signature age, cloud-delivered protection and recent detections.
Security controls should be piloted, monitored and reversible through console access. Visit networkmanager.info for managed Windows VPS services.
Prerequisites
- Confirm Defender is the approved antivirus product.
- Check compatibility with server applications.
- Use internet or managed update sources.
- Review exclusions before changing them.
Procedure
Step 1: Inspect status
Read protection and signature fields.
Get-MpComputerStatus | Select AMServiceEnabled,AntivirusEnabled,RealTimeProtectionEnabled,AntivirusSignatureLastUpdated,QuickScanAge,FullScanAgeStep 2: Update intelligence
Request a signature update.
Update-MpSignatureStep 3: Run quick scan
Start a controlled scan.
Start-MpScan -ScanType QuickScanStep 4: Review threats
Inspect detections and remediation.
Get-MpThreatDetectionStep 5: Check operational log
Review Defender events.
Verification
Confirm updated signatures and active real-time protection.
Get-MpComputerStatus | Select AntivirusEnabled,RealTimeProtectionEnabled,AntivirusSignatureVersion,AntivirusSignatureLastUpdatedRollback and recovery
Status checks are read-only. If a scan causes application impact, stop through the supported Defender interface and review vendor-approved exclusions rather than disabling protection.
Security notes
Exclusions reduce protection and must be narrow, documented and periodically reviewed.
Official references
Explore Netcloud24 Canada.
