Troubleshoot wsus client not updating
This event is usually due to an interruption in network connectivity during an update.To troubleshoot this event: The Windows Defender client attempted to download and install the latest definitions file and failed.
Windows 10, versions 1507 (Windows 10 RTM) and 1511 updates can also cause this, though to a lesser extent.Windows 10, version 1703 is still recent enough that the metadata is not that large yet (but will continue to grow).The symptoms include Microsoft support has determined that the issue is driven primarily by the Windows 10 1607 updates, for example KB4022723, KB4022715, KB4025339, etc. These updates have large metadata payloads for the dependent (child) packages because they roll up a large number of binaries.The Windows Defender client's real-time protection feature encountered an error because one of the services failed to start.If it is followed by a 3007 event ID, the failure was temporary and the antimalware client recovered from the failure.Windows Defender AV records event IDs in the Windows event log.
You can directly view the event log, or if you have a third-party security information and event management (SIEM) tool, you can also consume Windows Defender client event IDs to review specific events and errors from your endpoints.
This section provides the following information about Windows Defender Antivirus client errors.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site.
The table in this section lists the main Windows Defender AV event IDs and, where possible, provides suggested solutions to fix or resolve the error.
To view a Windows Defender AV event The Windows Defender client encountered an error, and the current scan has stopped. This event record includes the scan ID, type of scan (antivirus, antispyware, antimalware), scan parameters, the user that started the scan, the error code, and a description of the error.
To troubleshoot this event: Windows Defender could not load antimalware engine because current platform version is not supported.