Windows Defender Signature Updates Not Working
Microsoft Defender Antivirus regularly downloads security intelligence updates, formerly called definition or signature updates, so Windows can recognize newer malware and other threats. When these updates stop working, Windows Security may show messages such as “Protection definition update failed” or “Signature Update failed.” Microsoft documents several possible causes, including Windows Update problems, network or firewall restrictions, another antivirus program taking over protection, and problems with Defender’s update mechanism.
If your Windows Defender signature updates are not working, do not worry. Follow the steps in this guide to get it working easily!
Windows Defender Signature Updates Not Working
If Windows Defender signature updates are not working, first restart your computer and check your internet connection. Then open Windows Security > Virus & threat protection > Protection updates and select Check for updates. If the update still fails, install pending Windows updates, run the Windows Update troubleshooter, check that another antivirus program is not disabling Microsoft Defender, and manually run the MpCmdRun.exe -SignatureUpdate command from an elevated Command Prompt. Microsoft also provides a manual security intelligence update method if normal updating continues to fail.
Let’s explore the steps in detail!
Step 1: Restart Your Computer and Check Your Internet Connection
Before changing advanced Windows settings, restart your computer. A temporary Windows service problem or an incomplete update process can sometimes prevent Defender from downloading new security intelligence.
Select Start, select the Power button, and choose Restart. After Windows starts again, make sure your computer is connected to the internet.
Open your web browser and visit a few normal websites. If websites are not loading correctly, fix the internet connection first. Microsoft Defender needs network connectivity to obtain updates from its update sources.
If you are using a VPN, proxy, corporate firewall, or other network filtering software, it can also interfere with update connections. Try disconnecting from the VPN temporarily and then check for the Defender update again.
Step 2: Check for Defender Updates From Windows Security
Windows provides a simple way to manually check for the latest Defender security intelligence.
Open the Start menu and type Windows Security. Select Windows Security from the search results.
Select Virus & threat protection. Look for the Virus & threat protection updates section and select Protection updates.
You should see information about the current security intelligence version and its update date. Select Check for updates.
Wait while Windows checks for a newer update. If an update is available, Windows should download and install it automatically.
Microsoft recommends manually checking for protection updates when Defender is not updating automatically.
If the update fails again, continue with the next step.
Step 3: Install Pending Windows Updates
Defender updates can depend on Windows Update components. Therefore, it is important to make sure Windows itself is fully updated.
On Windows 11, open Settings, select Windows Update, and then select Check for updates.
Allow Windows to download and install available updates. If Windows asks you to restart the computer, restart it.
After the restart, return to Windows Security, open Virus & threat protection, select Protection updates, and try Check for updates again.
Microsoft recommends keeping Windows updated when troubleshooting Defender update problems.
Step 4: Run the Windows Update Troubleshooter
If Windows Update itself is experiencing a problem, the Windows Update troubleshooter can help identify and repair common issues.
Open Settings and select System. Select Troubleshoot, followed by Other troubleshooters.
Find Windows Update and select Run.
Follow the instructions displayed on the screen. Windows may detect problems involving update services or other update components and attempt to correct them.
When the troubleshooting process finishes, restart your computer. Then open Windows Security and try the Defender update again.
Microsoft recommends the Windows Update troubleshooter for Windows 11 and Windows 10 systems experiencing update problems.
Step 5: Check Whether Another Antivirus Program Is Installed
One commonly overlooked cause is a third-party antivirus program.
If you have installed antivirus software from another company, Microsoft Defender may not operate as your primary antivirus. Microsoft specifically notes that some non-Microsoft antivirus products can disable Microsoft Defender Antivirus through the Windows Security Center interface. When Defender is disabled, its updates cannot occur normally.
Open Windows Security and select Virus & threat protection.
Look at the provider information shown on the page. If another antivirus program is controlling real-time protection, check its settings.
If you intentionally installed another antivirus, do not run multiple real-time antivirus products simultaneously simply to force Defender to update. Instead, determine which antivirus you want Windows to use.
If you recently uninstalled another antivirus program and Defender still appears disabled, restart Windows and check Windows Security again.
Step 6: Make Sure Microsoft Defender Services Are Running
Windows Defender relies on system services to provide antivirus protection and perform update operations.
Press Windows + R to open the Run dialog. Type services.msc and press Enter.
The Services window will open. Look for services related to Microsoft Defender Antivirus and Windows Update.
Do not randomly change the startup type of Windows services. If a required security or update service has been disabled by software, a policy, or an administrator, changing it incorrectly can create additional problems.
If your computer belongs to an organization, some services and update settings may be controlled by your administrator. In that situation, local changes may not be appropriate.
Microsoft lists a disabled Defender service as one possible reason for Defender command-line operations to fail.
Step 7: Force a Defender Signature Update Using Command Prompt
If the normal Windows Security interface cannot update Defender, you can manually trigger a security intelligence update with MpCmdRun.exe.
This method is slightly more advanced, but you can follow it carefully.
Open the Start menu and type Command Prompt. Right-click Command Prompt and select Run as administrator.
When the User Account Control window appears, select Yes.
Now enter the following command:
MpCmdRun.exe -SignatureUpdate
Press Enter.
Microsoft documents MpCmdRun.exe -SignatureUpdate as a command for checking for new Microsoft Defender security intelligence updates. The tool normally needs to be run from the appropriate Defender folder using an elevated Command Prompt.
If Windows says that MpCmdRun.exe is not recognized, that does not necessarily mean Defender is broken. The executable may simply not be in the Command Prompt’s PATH.
Microsoft lists Defender locations including:
C:\Program Files\Windows Defender
and the newer platform location under:
C:\ProgramData\Microsoft\Windows Defender\Platform\
For most beginners, use the Windows Security method first and only use this command when the graphical update option fails.
Step 8: Force the Update Through Microsoft’s Malware Protection Center
If the standard signature update command does not work, Microsoft provides another option that attempts to download the update directly from the Microsoft Malware Protection Center.
Open Command Prompt as administrator again.
Run:
MpCmdRun.exe -SignatureUpdate -MMPC
This tells Defender to use the Microsoft Malware Protection Center as the update source. Microsoft specifically recommends trying this method when manual security intelligence updating works but the normal update path is having trouble.
After the command completes, open Windows Security > Virus & threat protection > Protection updates and check the security intelligence date and version.
Step 9: Check Your Firewall, Proxy, or Network Restrictions
If Defender commands continue to fail, the problem may be related to network connectivity rather than Windows Security itself.
Microsoft notes that the URLs required for security intelligence updates must be accessible through the firewall or proxy. Network security systems can block Defender from reaching its update service.
This is particularly important on computers connected to a company, school, or managed network.
If you are using a personal computer, temporarily disconnect a VPN or check whether third-party firewall software is blocking Windows Update or Microsoft Defender.
If the computer is managed by an organization, contact the administrator rather than changing corporate firewall or proxy settings yourself.
Manually Install the Latest Defender Security Intelligence Update
If automatic updating continues to fail, Microsoft provides a manual security intelligence update option.
This can be useful for determining whether Defender itself is functioning correctly or whether the problem is specifically related to the normal update channel.
Microsoft’s troubleshooting guidance recommends manually downloading and installing the latest security intelligence update when Defender updates continually encounter errors.
After installing the update, restart your computer and check the Protection updates page again.
If the manual update succeeds but Windows Security still cannot automatically update Defender, the problem is likely related to the normal update path, Windows Update, network configuration, or organizational update policies.
FAQs
Why are Windows Defender signature updates not working?
Common causes include Windows Update problems, network restrictions, firewall or proxy configuration, disabled Defender services, and another antivirus program taking over primary protection. Microsoft documents several Defender update error codes associated with these problems.
What is a Defender signature update?
A Defender signature update is now generally referred to as a security intelligence update. It provides Microsoft Defender with updated information used to identify current malware and other threats. Defender also receives engine and platform updates through Microsoft’s update mechanisms.
Can I manually update Microsoft Defender?
Yes. You can use the Protection updates section in Windows Security, the MpCmdRun.exe -SignatureUpdate command, or Microsoft’s manual security intelligence update method.
Is it safe to use MpCmdRun.exe?
Yes, when you are using the legitimate Microsoft Defender MpCmdRun.exe supplied with Windows. It is Microsoft’s command-line utility for managing Defender functions, including security intelligence updates and scans.
What does “Protection definition update failed” mean?
It means Microsoft Defender was unable to successfully obtain or install the required security intelligence update. Microsoft lists several possible error codes associated with this problem, so the exact error code can help identify the cause.
Should I reinstall Windows if Defender will not update?
Usually, reinstalling Windows should not be your first troubleshooting step. Start with Windows Update, network checks, Defender status, the Windows Update troubleshooter, and manual Defender updating. These steps can resolve many update-related problems without reinstalling Windows.
Summary
When Windows Defender signature updates are not working, start with the simplest solutions. Restart your computer, verify your internet connection, and manually check for updates through Windows Security. Next, install pending Windows updates and run the Windows Update troubleshooter.
If the problem continues, check whether another antivirus program is controlling protection and verify that Defender-related services have not been disabled. For more advanced troubleshooting, use MpCmdRun.exe -SignatureUpdate and, if necessary, MpCmdRun.exe -SignatureUpdate -MMPC.
Microsoft also recommends manually installing the latest security intelligence update when normal Defender updating continues to fail.