Update windows-defender-antivirus-on-windows-server-2016.md

This commit is contained in:
denisebmsft 2019-09-10 12:03:35 -07:00
parent f881bf019a
commit 6b066e3c1a

View File

@ -9,9 +9,9 @@ ms.mktglfcycl: manage
ms.sitesec: library ms.sitesec: library
ms.pagetype: security ms.pagetype: security
ms.localizationpriority: medium ms.localizationpriority: medium
author: dansimp author: denisebmsft
ms.author: dansimp ms.author: deniseb
ms.date: 09/03/2018 ms.date: 09/10/2019
ms.reviewer: ms.reviewer:
manager: dansimp manager: dansimp
--- ---
@ -41,7 +41,6 @@ This topic includes the following instructions for setting up and running Window
- [Configure automatic exclusions](#BKMK_DefExclusions) - [Configure automatic exclusions](#BKMK_DefExclusions)
<a name="BKMK_UsingDef"></a>
## Enable or disable the interface on Windows Server 2016 ## Enable or disable the interface on Windows Server 2016
By default, Windows Defender AV is installed and functional on Windows Server 2016. The user interface is installed by default on some SKUs, but is not required. By default, Windows Defender AV is installed and functional on Windows Server 2016. The user interface is installed by default on some SKUs, but is not required.
@ -87,7 +86,7 @@ This is useful if you have a third-party antivirus product installed on the mach
The following PowerShell cmdlet will also uninstall Windows Defender AV on Windows Server 2016: The following PowerShell cmdlet will also uninstall Windows Defender AV on Windows Server 2016:
```PS ```PowerShell
Uninstall-WindowsFeature -Name Windows-Defender Uninstall-WindowsFeature -Name Windows-Defender
``` ```
@ -95,7 +94,7 @@ To install Windows Defender AV again, use the **Add Roles and Features Wizard**
You can also use the following PowerShell cmdlet to install Windows Defender AV: You can also use the following PowerShell cmdlet to install Windows Defender AV:
```PS ```PowerShell
Install-WindowsFeature -Name Windows-Defender Install-WindowsFeature -Name Windows-Defender
``` ```
@ -103,9 +102,21 @@ Install-WindowsFeature -Name Windows-Defender
> Event messages for the antimalware engine included with Windows Defender AV can be found in [Windows Defender AV Events](troubleshoot-windows-defender-antivirus.md). > Event messages for the antimalware engine included with Windows Defender AV can be found in [Windows Defender AV Events](troubleshoot-windows-defender-antivirus.md).
<a name="BKMK_DefRun"></a>
## Verify Windows Defender is running ## Verify Windows Defender is running
To verify that Windows Defender AV is running on the server, run the following command from a command prompt:
To verify that Windows Defender AV is running on the server, run the following PowerShell cmdlet:
```PowerShell
Get-Service -Name windefend
```
To verify that firewall protection through Windows Defender is turned on, run the following PowerShell cmdlet:
```PowerShell
Get-Service -Name mpssvc
```
As an alternative to PowerShell, you can use Command Prompt to verify that Windows Defender AV is running. To do that, run the following command from a command prompt:
```DOS ```DOS
sc query Windefend sc query Windefend
@ -113,8 +124,9 @@ sc query Windefend
The `sc query` command returns information about the Windows Defender service. If Windows Defender is running, the `STATE` value displays `RUNNING`. The `sc query` command returns information about the Windows Defender service. If Windows Defender is running, the `STATE` value displays `RUNNING`.
<a name="BKMK_UpdateDef"></a>
## Update antimalware Security intelligence ## Update antimalware Security intelligence
In order to get updated antimalware Security intelligence , you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), make sure that updates for Windows Defender Antivirus Security intelligence are approved for the computers you manage. In order to get updated antimalware Security intelligence , you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), make sure that updates for Windows Defender Antivirus Security intelligence are approved for the computers you manage.
By default, Windows Update does not download and install updates automatically on Windows Server 2016. You can change this configuration by using one of the following methods: By default, Windows Update does not download and install updates automatically on Windows Server 2016. You can change this configuration by using one of the following methods: