Trying to use GPO to do daily full scans with Defender

Hi, using Server 2016 Essentials and 13 Windows 10 Pro 64 bit PC's. Setting GPO to various things works except when I set the WD scheduled daily scan. Options are everyday,Sunday,Monday,..., Never. When I set it to everyday and click OK, it automatically disables the policy although setting it to a specific day works. However the boss wants a daily full scan ran on all computers.
Has anyone else come across this or is it a know bug that Microsoft should have fixed by now? And is there a feasible (i.e. practical) workaround/solution?

Many thanks
Adrian

But it's WD/WDS I'm trying to run!!! More specifically, run at a time when the users are not there. It's the GPO side that seems to be the problem.

Regards
Adrian

You mean this GPO?



You could try setting value in the registry. ProcMon indicates it is here:

HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E66B3A5F-1987-43C0-9ED4-44582A3B11A9}Machine\Software\Policies\Microsoft\Windows Defender\Scan

For daily you want to set it daily change the ScheduleDay DWORD to zero (other values in picture above). Then go to gpedit.msc and enable it.

Updating the frequency via regedit works for me but then it also works OK if I set it to daily (i.e. doesn't disable policy) using gpedit.msc. Note I'm using 10 ProWork version 16299.125 not server.

Worth a try though perhaps.