Use Microsoft Endpoint Manager to run a scan
Ensure that the device has permissions to the access network share. If the domain device account doesn't have appropriate permissions to access the share, the scan won't work. For network scans, it uses the context of the device account. Microsoft Defender Antivirus runs in the context of the LocalSystem account when performing a local scan. In most cases, a quick scan is sufficient and is the recommended option for scheduled or on-demand scans. A quick scan looks at all the locations where there could be malware registered to start with the system, such as registry keys and known Windows startup folders.Ĭombined with always-on, real-time protection, which reviews files when they are opened and closed, and whenever a user navigates to a folder, a quick scan helps provide strong protection against malware that starts with the system and kernel-level malware. When you run a scan, you can choose from among three types: Quick scan, full scan, and custom scan. These scans will start immediately, and you can define parameters for the scan, such as the location or type.
You can run an on-demand scan on individual endpoints. Configure and run on-demand Microsoft Defender Antivirus scans
