Select the Microsoft Defender safe deployment channel

Policy ID
Root_DeploymentChannel
Scope
Computer Configuration
Supported on
At least Windows Server 2008 R2 or Windows 7
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus

Description

Enable this policy to specify when devices receive Microsoft Defender binary updates.​

Validation Channel: Devices set to this channel are the first to receive new monthly binary (platform and engine) updates. The likelihood of new issues occurring is higher, so add only devices with the highest risk tolerance to this channel (recommended for 1% or less of devices in your environment).
Release Channel - Early: The release channel is appropriate for most of your production environment. Devices set to this channel are offered updates earliest in the release channel. Distribute devices across early, fast and broad depending on their risk tolerance. Add devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.
Release Channel - Fast: The release channel is appropriate for most of your production environment. Devices are offered updates later during the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.
Release Channel - Broad: The release channel is appropriate for most of your production environment. Devices in this channel receive updates at the end of the gradual release cycle. Distribute devices across early, fast and broad depending on their risk tolerance. Use devices in the earlier channels to surface issues sooner and avoid impacting the rest of your environment.
Delayed Channel: Devices in this channel are offered updates approximately 48 hours after the devices in the release channel (broad). Use this channel for critical infrastructure and high value assets (~1% or less of devices).

If you don't configure this policy, devices are added to the release channel. Microsoft determines whether devices receive updates earlier or later within the release channel.

Options

  • Select the Microsoft Defender safe deployment channel:
    • Validation Channel
    • Release Channel - Early
    • Release Channel - Fast
    • Release Channel - Broad
    • Delayed Channel

Registry

ComputerHKEY_LOCAL_MACHINE
  • DeploymentChannelREG_DWORD

Other policies in the same category

View all policies in this category (18)