If you rely on Windows Security to keep your PC safe, you probably assume your machine is being scanned for malware around the clock. In reality, Microsoft’s built-in antivirus only runs when your computer is powered on. If your PC was asleep or shut down during a scheduled window, that scan simply gets skipped. Fortunately, a hidden policy setting can resolve a Windows Defender missed scan automatically so you are never left unprotected.
Why Defender Skips Scheduled Scans
Windows Security schedules quick and full scans at regular intervals. The operating system respects your power state and battery thresholds to avoid interrupting your workflow. While this behavior makes sense for convenience, it creates a blind spot. If your machine sits powered off for several days, the scan timer resets, and you could go weeks without a fresh malware check. This is especially noticeable for users who travel frequently or keep desktops in sleep mode.
What This Registry Tweak Actually Does
Microsoft includes a dormant Group Policy option that addresses this exact gap. By creating a specific registry key, you can tell Windows Security how many days it should wait without performing a scan before forcing a quick scan of your drive. Think of it as a safety net. Instead of letting the scan timer roll indefinitely while your PC is offline, the operating system will automatically run a catch-up scan once the threshold is exceeded. This ensures your threat detection stays current regardless of your power habits.
How to Resolve a Windows Defender Missed Scan
Applying this setting requires a quick trip into the Windows Registry. You will need administrative privileges, so make sure you are signed in with an account that has those rights. Open the Start menu, type regedit, and launch the Registry Editor. Navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Windows\Windows Security
If the Windows Security folder does not exist under Policies, right-click the Windows key, select New → Key, and name it exactly as shown. Inside that folder, right-click in the empty space on the right pane, choose New → Key, and name the new folder Scan. With the Scan key selected, right-click the right pane again, select New → DWORD (32-bit) Value, and name it DaysUntilAggressiveCatchupQuickScan.
Double-click the new value to open the editor. You can enter any number between 7 and 60. If you leave it unconfigured, Windows Security will default to forcing a scan after 25 days without one. Microsoft recommends setting the value to 7 for most users, as it balances security coverage with system performance. A seven-day window means your PC will never go more than a week without a fresh malware check, even if you forget to manually trigger one.
Once you enter your preferred number, click OK and close the Registry Editor. Windows Security will recognize the new policy immediately. You do not need to restart your machine. To verify the setting is active, open Windows Security, navigate to Virus & threat protection, and check the scan history. You should see a quick scan trigger automatically once the day threshold is reached.
What This Means for You
For everyday users, this tweak eliminates the anxiety of wondering whether your PC was actually scanned last week. It is particularly useful for hybrid workers who shut down their laptops on weekends, parents managing shared family computers, and anyone who prefers their devices in sleep mode rather than fully powered off. The setting operates silently in the background, so you will not notice performance hits or pop-ups. It simply ensures your threat protection stays consistent with your usage patterns.
IT administrators managing enterprise fleets should note that this policy is designed for Group Policy deployment. If you are rolling this out across multiple machines, you can push the registry change via Intune or a domain policy without touching individual endpoints. The key path and value name remain identical regardless of deployment method.
How to Get It
This feature is already built into Windows 11 and does not require a separate download or update. You simply need to create the registry key and value manually using the steps above. The policy applies to all supported editions of Windows 11, including Home, Pro, and Enterprise. If you are running Windows 10, the same registry path works, though Microsoft has gradually shifted policy management toward the Settings app in newer builds.
Keep in mind that this setting only triggers quick scans. If you need a comprehensive full scan, you will still need to run it manually or adjust your scheduled scan settings in Windows Security. The aggressive catch-up option is specifically designed to fill the gaps left by missed quick scans, not to replace your regular full-system checks.
Source: PCWorld
Over to you: Have you ever noticed Windows Defender skipping a scheduled scan because your PC was asleep or shut down?
