Skip to main content
TechNet

Tip:Run (and Automate) Windows Defender from the Command Line


Windows Defender includes a command-line utility, MpCmdRun.exe, which can be handy if you want to automate the use of Windows Defender. The utility is located on Windows 7 at %ProgramFiles%\Windows Defender\MpCmdRun.exe.

The basic usage at the command prompt is:
MpCmdRun.exe [command] [-options]

mpcmdrun.jpg

Here’s an overview of available commands:

CommandDescription
-?Displays all available options for the tool
-Trace [-Grouping #] [-Level #]Starts diagnostic tracing
-RemoveDefinitions [-All]Restores the installed signature definitions to a previous backup copy or to the original default set of signatures
-RestoreDefaultsResets the registry values for Windows Defender settings to known good defaults
-SignatureUpdateChecks for new definition updates
-Scan [-ScanType]Scans for malicious software
-GetFilesCollects support information



Tip by Matthew Graven, TechNet Tips Editor.


Looking for More Tips?


For more tips on Microsoft products and technologies, visit the TechNet Tips library.