Skip to main content

This particular worklet looks for any system set to never run a full scan and changes it to run on Wednesdays. You could obviously alter it to look for a different condition and set it how you wish. For example…


You could look for systems not set to do a full scan every day in the evaluation and change it to do so…

Evaluation: if ($Preferences.RemediationScheduleDay -ne 0)

Remediation: Set-MpPreference -RemediationScheduleDay 0


Or conversely, if you want Defender to never do a full scan…

Evaluation: if ($Preferences.RemediationScheduleDay -ne 8)

Remediation: Set-MpPreference -RemediationScheduleDay 8


The acceptable values for this parameter are:



  • 0: Everyday

  • 1: Sunday

  • 2: Monday

  • 3: Tuesday

  • 4: Wednesday

  • 5: Thursday

  • 6: Friday

  • 7: Saturday

  • 8: Never


Evaluation:


# Determine if full Defender scans are set to never run
$Preferences = Get-MpPreference
if ($Preferences.RemediationScheduleDay -eq 8)
{ exit 1 }
else
{ exit 0 }

Remediation:


# Set a full Defender scan to run on Wednesdays
Set-MpPreference -RemediationScheduleDay 4
Be the first to reply!

Reply