{"id":12558,"date":"2026-07-27T19:52:27","date_gmt":"2026-07-28T00:52:27","guid":{"rendered":"https:\/\/www.rushworth.us\/lisa\/?p=12558"},"modified":"2026-09-20T13:57:43","modified_gmt":"2026-09-20T18:57:43","slug":"windows-defender-auto-updates-fail","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=12558","title":{"rendered":"Windows Defender Auto-Updates Fail"},"content":{"rendered":"<p>Windows Defender is\u00a0<em>supposed<\/em> to automatically update itself. But I periodically experience these updates getting &#8216;stuck&#8217;. To force an update from the CLI:<\/p>\n<p>cd &#8220;C:\\ProgramData\\Microsoft\\Windows Defender\\Platform&#8221;<br \/>\ndir<br \/>\n# REM cd into the latest iteration<br \/>\ncd 4.18.26060.3008-0<br \/>\nMpCmdRun.exe -removedefinitions -dynamicsignatures<br \/>\nMpCmdRun.exe -SignatureUpdate<\/p>\n<ul>\n<li><code>-removedefinitions -dynamicsignatures<\/code> removes only the <em>dynamic<\/em> security intelligence\/signature content already present on the box. In practice, this is a rollback\/flush step. It is commonly used when you want to clear bad\/poisoned\/cached dynamic detections.<\/li>\n<li><code>-SignatureUpdate<\/code> does the fetch\/install step: it contacts the configured update source and downloads the current antimalware definitions\/security intelligence.<\/li>\n<\/ul>\n<p>If all else fails, download latest from https:\/\/www.microsoft.com\/en-us\/wdsi\/defenderupdates and manually install it<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows Defender is\u00a0supposed to automatically update itself. But I periodically experience these updates getting &#8216;stuck&#8217;. To force an update from the CLI: cd &#8220;C:\\ProgramData\\Microsoft\\Windows Defender\\Platform&#8221; dir # REM cd into the latest iteration cd 4.18.26060.3008-0 MpCmdRun.exe -removedefinitions -dynamicsignatures MpCmdRun.exe -SignatureUpdate -removedefinitions -dynamicsignatures removes only the dynamic security intelligence\/signature content already present on the box. In &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[2230,136,2231,66],"class_list":["post-12558","post","type-post","status-publish","format-standard","hentry","category-system-administration","tag-defender","tag-windows","tag-windows-defender","tag-windows-update"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12558"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12558\/revisions"}],"predecessor-version":[{"id":12559,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/12558\/revisions\/12559"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}