Windows 7 Defender not scanning on schedule (issue with Task Scheduler - MP Schedule Scan?)
I am running Windows 7 Ult. RTM Technet release.The system I am using has a clean default install of Windows 7 (using a system image). No other software installed.Windows Defender:Client Version: 6.1.7600.16385Engine Version: 1.1.4903.0Antispyware definitions: 1.63.1207.0The issue I am having is that Windows Defender is notscanning as scheduled. By Default, Windows 7 Defender is scheduled to scan at 2am with the option "run scan only when system is idle". I changed this to scan at 8am. The next day, Defender ran as scheduled. I then decided to disable the option "run scan only when system is idle". The next day I noticed Defender did not scan at 8am.The Windows defender service was still running and I could manually initiate a scan. No errors in Event Viewer.I then checked Task Scheduler and I noticed there was no entry for Windows Defender - MP Scheduled Scan.So I reloaded my system to default using my backup Windows 7image.I went to Task Scheduler and MP Scheduled Scan was there (set for 2am).I used the Defender UI to set the scan time to 8am. That change was reflected in MP Scheduled Scan (now set for 8am).However, when I used the Defender UI to disable "run scan only when system is idle", MP Scheduled Scan was deleted!I now know why the scan did not occur.Can anyone please provide some more insight into the relationship between Windows Defender and MP Scheduled Scan. Why does disabling "run scan only when system is idle" delete the MP Scheduled Scan in Task Scheduler? Is this by design?Thank you for any help.
August 11th, 2009 10:25pm

Do you have third party anti-virus or anti-spyware? If so, I suggest that you check the records of them to verify if they have done any tasks in Registry to delete the following keys. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows DefenderHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{724D1A93-A15F-4AD8-9EC9-798B94885DC5} If there is not records can be check, I suggest that you temporary remove the security programs, and then check if the issue still occurs. Additionally, we do not need to restore the system to get to schedule back. Just re-configure the setting in Windows Defender, and restart then you will see the task is back. This issue also occurs if you configure to use any third party Registry Cleaners. However, if the issue occurs when any security programs are removed, I suggest that you run In-place Upgrade to repair the system for Windows Defender. Arthur Xie - MSFT
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2009 11:37am

Hello and thank you for your reply.We areusing Windows 7 Ultimate 64-bit Technet RTM ISO. We install the OSthen immediately image the drive. We then use this image to restore our system after evaluating various testscenarios. Performing an in-place upgrade is not an option unfortunately.No third party software is installed (no anti-virus, spyware, registry cleaners)With regards to the registry keys:- Both keys are present when I restore thesystem from the image.- Disabling "run scan only when system is idle" using the Defender UIwill delete both keys and will also delete the trigger/task in Task Scheduler.Can you confirm that on your system, disabling that option in the Defender UI does NOT delete the registry keys and the trigger/task?Thank you for your help.
August 13th, 2009 5:39pm

Hi, I forgot to tell you that during my testing it did not occur. So it should not be a design issue. Since the issue is not caused by third party programs either, I suggested that you repair the system to resolve it. Now it seems that you may need a new system installation image to repair the system, or reinstall it.`Arthur Xie - MSFT
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2009 10:21am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics