Define the order of sources for downloading security intelligence updates
- Policy ID
- SignatureUpdate_FallbackOrder
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
Description
This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares”
For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC }
If you enable this setting, security intelligence update sources will be contacted in the order specified. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted.
If you disable or do not configure this setting, security intelligence update sources will be contacted in a default order.
Options
Registry
- FallbackOrderREG_SZ