Microsoft Defender not updating: get updates moving again
Microsoft Defender usually stops updating because Windows Update is stuck, the Defender security intelligence service can’t reach Microsoft, or another antivirus or disabled security service is blocking it. Start with a restart and an internet check, then run Windows Update and trigger a Defender update manually. If that still fails, check service status and third-party antivirus conflicts, and hand it to repair or admin support when the device is managed or the update stack looks broken.
What you see when Defender stops updating
The usual sign is that Windows Security shows old virus and threat protection intelligence, the update date stays stale, or the update keeps retrying without finishing.
Sometimes the rest of Windows looks fine, but only Defender definitions are stuck. In other cases, Windows Update is also failing, which points to a wider servicing problem rather than a Defender-only issue.
If Windows Security opens normally but the protection intelligence never changes, the problem is usually in the update path, a security service, or another antivirus product.
Before you start
This guidance applies when Microsoft Defender security intelligence updates are out of date, pending, or failing to install on a Windows PC.
Before changing anything, check these safe basics:
- Make sure the PC has an active internet connection.
- Check that the date, time, and time zone are correct. A wrong clock can stop update checks from completing normally.
- Open Windows Update and see whether other updates are pending or failing. If Windows Update is stuck, Defender often gets stuck with it.
- If you have another antivirus installed, remember that some products disable or replace parts of Defender while they’re active.
If this is a work or school device, stop if security settings look managed by your organization. In that case, the right fix may be admin support rather than trying to override policy.
The quickest fixes to try in order
- Restart the PC.
A restart clears temporary update stalls and restarts services that may have hung. After the restart, open Windows Security and check whether the protection intelligence date changed.
- Check Windows Update.
Open Settings, go to Windows Update, and look for pending updates or update errors. Install anything waiting there first, then check Defender again. If Windows Update was the blocker, Defender may start moving once the update stack is healthy.
- Update Defender from Windows Security.
Open Windows Security and go to the virus and threat protection area, then look for the protection updates or security intelligence update control. The exact wording varies by Windows version, but the goal is to force a fresh Defender definition check from the app itself.
If the update completes, the protection intelligence version should change and the last updated time should become recent. If the update button does nothing, move to PowerShell.
- Try a manual definition update in PowerShell.
Open PowerShell as administrator and run:
Update-MpSignatureThis asks Microsoft Defender to fetch new security intelligence directly. If it works, the command finishes without an error and Defender should show a newer definition version afterward.
If that command fails, check the services next.
- Verify the security services are running.
Defender depends on Windows security services being available. If a required service is stopped or disabled, updates can fail even when the network is fine. Open the Services app and confirm that the core security services related to Defender and Windows Security are not disabled. If a service won’t start, that usually points to a deeper Windows problem rather than a simple update delay.
If you are comfortable using PowerShell, you can also check Defender’s state with:
Get-MpComputerStatusYou’re looking for a normal protection status and a recent signature version. If the system reports Defender as inactive, disabled, or unable to start its protection engine, another antivirus product or a policy setting may be interfering.
- Check for third-party antivirus conflicts.
If another antivirus product is installed, temporarily disabling it is not always enough. Some products change Windows security components when they are installed, and Defender may stay passive until the other product is removed or fully unregistered. If your device is managed by your company, that may be intentional. If the machine is personal, uninstalling the conflicting antivirus and restarting is often the cleanest reversible test.
Stop there if the device starts updating after the conflicting product is removed. If it still won’t update, the issue is likely beyond a simple definition refresh.
- Move to a Windows repair path if nothing changes.
If Defender updates still fail after the steps above, the Windows component store or update stack may be damaged. That is usually the point where a repair install, an in-place Windows repair, or admin support makes more sense than repeating the same update commands. On a managed PC, this is also the point where you should hand it to your IT team, because policy or endpoint management may be controlling Defender behavior.
How to tell it worked
You can treat the problem as fixed when Windows Security shows a newer protection intelligence version and the last update time is current instead of stale.
A second sign is that manual updates complete without errors, either from Windows Security or from Update-MpSignature in PowerShell.
If you want one more check, open Defender status with Get-MpComputerStatus and confirm that the signatures are current and the protection state looks normal. If the version number changes but then quickly reverts, or the update succeeds only once and fails again later, the real issue is probably still the update service, a security policy, or another antivirus product overriding Defender.
Conclusion
If the quick checks and manual update still don’t fix it, stop repeating the same steps and move to Windows repair or admin support.
Frequently Asked Questions
Can I update Microsoft Defender without Windows Update working?
Sometimes, yes. A manual Defender signature update can still work even when Windows Update is struggling, but if the update service or a security service is broken, Defender may fail too. If the manual update fails, the problem is wider than definitions alone.
Why does Defender say it can’t update on a work PC?
On managed devices, update behavior can be controlled by policy or by an endpoint security tool your organization installed. In that case, the right fix is usually admin support rather than changing the settings yourself.