Security Policy Errors

How to Pause a Microsoft Defender Scan for a Device or Group

Amos Gikunda Oct 9, 2026 869 views

Question details

The user is looking for instructions or the proper channel to learn how to pause active Microsoft Defender scans for specific devices or device groups.

How to Pause a Microsoft Defender Scan for a Device or Group

Product: Microsoft Defender
Device & OS: not provided
Scenario: An administrator needs to manage endpoint security policies and wants to temporarily halt or pause antivirus scans for targeted devices within the Microsoft 365 Defender admin center.
Observed behavior: Because the ability to pause scans depends heavily on specific tenant configurations and administrative controls, direct toggles may not be universally visible, requiring expert guidance.

Before you start

Before modifying any enterprise security policies, ensure you have the appropriate Security Administrator or Global Administrator privileges in your Microsoft 365 tenant.

Solution 1Recommended

Consult the Microsoft Q&A Community for Tenant-Specific Guidance

Because administrative controls and tenant configurations vary significantly across organizations, reaching out to Defender specialists is the recommended approach to find exact steps for your setup.

Microsoft 365 offers various ways to manage endpoint security (such as Intune, Group Policy, or Configuration Manager). Pausing a scan for a specific device group requires tailored instructions based on the management tools your organization has deployed.

Navigate to Microsoft Q&A

Open your web browser and go to the official Microsoft Q&A Community website.

Sign In

Create a New Post

Click on the 'Ask a question' button to start drafting your inquiry about pausing scans for specific device groups.

Apply the Correct Tag

Add the 'Microsoft Defender' tag to your post. This ensures your question is routed to specialized security engineers who can provide guidance based on your tenant's configuration.

Consult the Microsoft Q&A Community for Tenant-Specific Guidance

Provide Necessary Context: When asking your question, be sure to mention whether you use Microsoft Intune, MECM, or standard Group Policy to manage your devices, as this will help experts give you accurate PowerShell scripts or admin center steps.

Free Microsoft Office alternative

Boost Your Productivity with WPS Office

While you are optimizing your enterprise security policies and managing Microsoft Defender, you can also optimize your organization's productivity by using WPS Office. It is a lightweight, secure, and highly compatible office suite that handles your documents seamlessly.

1. Download the Installer: Visit the official WPS Office website and click the free download button.
2. Install the Software: Run the downloaded executable file and follow the quick installation prompts.
3. Open Your Documents: Launch WPS Office and instantly open any existing Microsoft Office files with perfect formatting preservation.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Lightweight architecture ensures it runs smoothly without triggering intensive system security scans.Free to use with a familiar, user-friendly interface that requires zero learning curve.Built-in PDF editing tools and seamless cloud integration for secure document sharing.

microsoft office alternative - wps office

Frequently Asked Questions

Can I pause an active Microsoft Defender scan directly from the local Windows Security app?

On a local machine, you generally cannot 'pause' a Quick or Full scan once it has initiated. You can only cancel it, or administrators can configure scan schedules via policy to ensure scans occur outside of active working hours.

How do I exclude a specific device group from Defender scans?

Administrators can use Microsoft Intune or the Microsoft 365 Defender admin center to create an Antivirus exclusion policy. This policy can be targeted and assigned specifically to a designated device group to prevent scanning of certain files or locations on those machines.

Why isn't there a simple 'pause' button in the Microsoft 365 Defender admin center?

Enterprise security tools are designed to prevent accidental or malicious interruption of critical security processes. Therefore, stopping or pausing active scans across a network typically requires deploying specific PowerShell scripts (like Cancel-MpWDOScan) or temporarily adjusting Intune policies rather than clicking a single pause button.

Microsoft Office Security Issues