FallbackOrder

  • Article

FallbackOrder specifies the order in which different definition update sources should be contacted by Microsoft Defender. Microsoft Defender is an application that can prevent, remove, and quarantine malware (malicious software) and spyware.

Values

<Order>

Specifies <order> in which different definition update sources should be contacted by Microsoft Defender. <Order> is a string that should be entered as multiple enumerated values for the definition update sources separated by the pipe character, "|", to represent the desired order.

Possible values for <order> are:

  • "InternalDefinitionUpdateServer"
  • "MicrosoftUpdateServer" - This is a default value.
  • "MMPC" - This is a default value.
  • "FileShares"

An example of how to specify the order of multiple definition update sources is: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC }.

Valid Configuration Passes

oobeSystem

offlineServicing

specialize

Parent Hierarchy

Security-Malware-Windows-Defender | FallbackOrder

Applies To

For Windows Windows Server 2016 editions, Microsoft Defender is installed with the operating system.

For Windows Server 2012, Windows Server 2008 R2 and Windows Server 2008, Microsoft Defender is installed with the Desktop Experience Pack.

For a full list of the Windows editions and architectures that this component supports, see Security-Malware-Windows-Defender.

XML Example

The following XML output shows how to specify the order for contacting the Microsoft Defender update definition sources in the following order: internal definition update server, Microsoft Update, MMPC.

<FallbackOrder>InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC</FallbackOrder>

Security-Malware-Windows-Defender