Daily Defender News
Aboutmerill.net
Microsoft Defender for Endpoint
Endpoint protection

Manage updates for mobile devices and virtual machines (VMs)

4 September 2026Doc update+36 / −14 lines

In brief

The article now provides updated GPMC navigation for configuring security intelligence updates from Microsoft Update and while on battery power, plus notes for older policy names and local Group Policy configuration.

What Defender admins need to know

Administrators can use the revised paths and version-specific naming guidance to find and configure these existing settings more easily.

Summaries are generated from the documentation change itself.

Documentation change

View full page diffView on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Manage updates for mobile devices and virtual machines (VMs)

  • Windows

Opt in to Microsoft Update on mobile computers without a WSUS connection

You can use Microsoft Update to keep Security intelligence on mobile devices running Microsoft Defender Antivirus up to date when they are not connected to the corporate network or don't otherwise have a WSUS connection.

Perform the following steps to enable Microsoft Update by using Group Policy:

  1. OnIn Centralized Group Policy, open the Group Policy Management Console (GPMC) on your Group Policy management machine, opencomputer.

  2. In the Group Policy Management Console, right-click theGPMC console tree, expand Group Policy ObjectObjects in the forest and domain containing the GPO you want to configureedit.

  3. Right-click the GPO, and then select Edit.

  4. In the Group Policy Management Editor, go to Computer configuration.

  5. Select Policies then > Administrative templates.

  6. Expand the tree to > Windows components > Microsoft Defender Antivirus > SignatureSecurity Intelligence Updates.

  1. In the details pane of Security Intelligence Updates, open the Allow security intelligence updates from Microsoft Update setting. To open the setting, use any of the following methods:

    • Double-click the setting.
    • Right-click the setting, and then select Edit.
    • Select the setting, and then select Action > Edit.

  2. In the setting window that opens, select Enabled, and then select OK.

Use a VBScript to opt in to Microsoft Update

Perform the following steps to prevent security intelligence updates when devices are running on battery power:

  1. In Centralized Group Policy, open the Group Policy Management Console (GPMC) on your Group Policy management computer.

  2. Set Allow security intelligence updates from Microsoft UpdateIn the GPMC console tree, expand Group Policy Objects in the forest and domain containing the GPO you want to Enabled,edit.

  3. Right-click the GPO, and then select OKEdit.

Use a VBScript to opt in to Microsoft Update

Perform the following steps to prevent security intelligence updates when devices are running on battery power:

  1. On your Group Policy management machine, open the Group Policy Management Console, choose the Group Policy Object you want to configure, and open it for editing.

  2. In the Group Policy Management Editor, go to Computer configuration.

  3. Select Policies then > Administrative templates.

  4. Expand the tree to > Windows components > Microsoft Defender Antivirus > SignatureSecurity Intelligence Updates, and then set Allow security intelligence updates when running on battery power to Disabled. Then select OK.

Disabling Allow security intelligence updates when running on battery power prevents protection updates from downloading when the PC is on battery power.

  • Manage Microsoft Defender Antivirus updates and apply baselines
    1. In the details pane of Security Intelligence Updates, open the Allow security intelligence updates when running on battery power setting. To open the setting, use any of the following methods:
      • Double-click the setting.
      • Right-click the setting, and then select Edit.
      • Select the setting, and then select Action > Edit.
    1. In the setting window that opens, select Disabled, and then select OK.

    Disabling Allow security intelligence updates when running on battery power prevents protection updates from downloading when the PC is on battery power.