Skip to main content
Question

Microsoft Defender - Scheduled scan behaviour

  • March 10, 2026
  • 2 replies
  • 40 views

PE14_2
Forum|alt.badge.img+7

From here https://learn.microsoft.com/en-us/defender-endpoint/mac-jamfpro-policies

Added configuration profile Microsoft Defender – Scheduled Scans

Everyday at 14:45 and Wednesday at 10:00 

 

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
<dict> 
    <key>features</key> 
    <dict> 
        <key>scheduledScan</key> 
        <string>enabled</string> 
    </dict> 
    <key>scheduledScan</key> 
    <dict> 
        <key>ignoreExclusions</key> 
        <true/> 
        <key>lowPriorityScheduledScan</key> 
        <true/> 
        <key>dailyConfiguration</key> 
        <dict> 
            <key>timeOfDay</key> 
            <integer>884</integer>
            <key>interval</key> 
            <string>1</string> 
        </dict> 
        <key>weeklyConfiguration</key> 
        <dict> 
            <key>dayOfWeek</key> 
            <integer>3</integer>
            <key>timeOfDay</key> 
            <integer>600</integer>
            <key>scanType</key> 
            <string>full</string> 
        </dict> 

    </dict> 
</dict> 
</plist>

But I see that the daily scan is not running:

In Terminal: mdatp health --details scheduled_scan

This would be OK:


But I a getting this:

 


any idea ?

thanks

2 replies

joboo72
Forum|alt.badge.img+5
  • Jamf Heroes
  • March 10, 2026

I think you need to remove the interval and string lines after the daily configuration time of day. This is mine and it successfully runs daily.

 

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
<dict> 
    <key>features</key> 
    <dict> 
        <key>scheduledScan</key> 
        <string>enabled</string> 
    </dict> 
    <key>scheduledScan</key> 
    <dict> 
        <key>ignoreExclusions</key> 
        <true/> 
        <key>lowPriorityScheduledScan</key> 
        <true/> 
        <key>dailyConfiguration</key> 
        <dict> 
            <key>timeOfDay</key> 
            <integer>885</integer> 
        </dict> 
        <key>weeklyConfiguration</key> 
        <dict> 
            <key>dayOfWeek</key> 
            <integer>4</integer> 
            <key>timeOfDay</key> 
            <integer>880</integer> 
            <key>scanType</key> 
            <string>full</string> 
        </dict> 
    </dict> 
</dict> 
</plist>


PE14_2
Forum|alt.badge.img+7
  • Author
  • Valued Contributor
  • March 11, 2026

Removes the MDATP MDAV Configuration settings and set it up again seems to solved the problem
thanks for you time.