The Check for New Signatures Before Scheduled Scans machine setting should be configured correctly. Checks for new signatures before running scheduled scans. If you enable this policy setting, the scheduled scan checks for new signatures before it scans the computer. If you disable or do not configure this policy setting, the scheduled scan begins without downloading new signatures. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Check for New Signatures Before Scheduled Scans (2) KEY: HKLM\Software\Policies\Microsoft\Windows Defender\Scan\CheckForSignaturesBeforeRunningScan