SCCM SQL query to check the defender update status and version

Boopathi S 3,606 Reputation points
2024-12-17T14:14:13.07+00:00

Hello Team,

Please share the SCCM SQL query to check Windows Defender update status and it is version for all the devices

I can see below in the resource explorer for a computer. does this help to check the defender update version

User's image

Microsoft Configuration Manager
{count} votes

Accepted answer
  1. AllenLiu-MSFT 47,706 Reputation points Microsoft Vendor
    2024-12-18T02:47:31.97+00:00

    Hi, @Boopathi S

    Like Francis mentioned, CMPivot is a easy way to get the status and version.User's image


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Sherry Kissinger 5,526 Reputation points
    2024-12-17T14:58:00.0233333+00:00

    I do not have that information, but perhaps this will assist you in finding the information:

    https://learn.microsoft.com/en-us/defender-endpoint/deploy-manage-report-microsoft-defender-antivirus#configuration-manager

    1 person found this answer helpful.
    0 comments No comments

  2. Chanuka Francis 361 Reputation points
    2024-12-17T18:15:42.3666667+00:00

    Use CMPivot in SCCM. Select the appropriate device collection and run the EPStatus command in CMPivot. It will live-query and provide you with all the Defender-related data from the collection of devices that are currently online and reachable. Please note that CMPivot is a live query tool, so do not initiate it on large collections as it may flood the network.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.