Select the channel for Microsoft Defender daily security intelligence updates

Policy ID
Root_SecurityIntelligenceUpdateChannel
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10 Version 1607
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus

Description

Enable this policy to specify when devices receive Microsoft Defender security intelligence updates during the daily gradual rollout.

Current Channel (Staged): Devices will be offered updates after the release cycle. Suggested to apply to a small, representative part of production population (~10%).
Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).
Critical - Time delay: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only.

If you disable or do not configure this policy, the device will stay up to date automatically during the daily release cycle. Suitable for most devices.

Options

  • Select the channel for Microsoft Defender daily security intelligence updates:
    • Current Channel (Staged)
    • Current Channel (Broad)

Registry

ComputerHKEY_LOCAL_MACHINE
  • SignaturesRingREG_DWORD

Other policies in the same category

View all policies in this category (18)