Privacy and Security Change Microsoft Defender Antivirus Max CPU Usage during Scan in Windows 11


  • Staff
Windows_Security_banner.png

This tutorial will show you how to change the maximum percentage of CPU usage allowed during a scan by Microsoft Defender Antivirus for all users in Windows 10 and Windows 11.

Microsoft Defender Antivirus is an antivirus software included in Windows 10/11 that can help protect your device from viruses, malware, and other threats.

Microsoft Defender Antivirus regularly scans your device to help keep it safe. It tries to do this while you are not using your device so it doesn’t interfere with your work.

Microsoft Defender Antivirus is allowed a maximum of 50 percent CPU usage during a scan by default in Windows.

You can specify a maximum percentage CPU usage during a scan you want allowed instead. Specifying a max CPU usage should be based on how your system is performing during a scan. If you increase the max, the scan will finish faster, but it could slow down your system during the scan. If you decrease the max, the scan will take longer to finish, but you will have more CPU resources available for your system during the scan.

References:

You must be signed in as an administrator to change the maximum percentage of CPU usage allowed during a scan by Microsoft Defender Antivirus.


Manual scans ignore this setting and run without any CPU limits.



Contents

  • Option One: See Current Maximum CPU Usage during Scan by Microsoft Defender Antivirus
  • Option Two: Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus in PowerShell
  • Option Three: Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus in Local Group Policy Editor
  • Option Four: Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus using Registry Editor




Option One

See Current Maximum CPU Usage during Scan by Microsoft Defender Antivirus


1 Open Windows Terminal, and select Windows PowerShell.

2 Copy and paste the command below into PowerShell, and press Enter. (see screenshot below)

Get-MpPreference | select ScanAvgCPULoadFactor

3 You will see the current maximum percentage number under ScanAvgCPULoadFactor.

4 You can now close Windows Terminal if you like.

Get-MpPreference.png





Option Two

Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus in PowerShell


1 Open Windows Terminal (Admin), and select Windows PowerShell.

2 Type the command below into PowerShell, and press Enter. (see screenshot below)

Set-MpPreference -ScanAvgCPULoadFactor <percentage>

Substitute <percentage> in the command above with a value of 0 or 5 to 100 for the maximum CPU usage you want during a scan.

Setting a value of 0 will disable CPU throttling for Microsoft Defender Antivirus allowing it to use as much CPU as it wants during a scan.

50 is the default value.

For example: Set-MpPreference -ScanAvgCPULoadFactor 50


3 You can now close Windows Terminal (Admin) if you like.

Set-MpPreference.png





Option Three

Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus in Local Group Policy Editor


The Local Group Policy Editor is only available in the Windows 10/11 Pro, Enterprise, and Education editions.

All editions can use Option Four for the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration>Administrative Templates>Windows Components>Microsoft Defender Antivirus>Scan

AvgCPULoadFactor_gpedit-1.png

3 In the right pane of Scan in the Local Group Policy Editor, double click/tap on the Specify the maximum percentage of CPU utilization during a scan policy to edit it. (see screenshot above)

4 Do step 5 (specify) or step 6 (default) below for what you would like to do.

5 Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus

This will override Option Two.


A) Select (dot) Enabled. (see screenshot below)​

B) Under Options, type a value of 0 or 5 to 100 for the maximum CPU usage you want.​

Setting a value of 0 will disable CPU throttling for Microsoft Defender Antivirus allowing it to use as much CPU as it wants during a scan.

50 is the default value.


C) Click/tap on OK, and go to step 7 below.​

AvgCPULoadFactor_gpedit-3.png

6 Use Default Maximum CPU Usage during Scan by Microsoft Defender Antivirus

This is the default setting to allow Option Two.


A) Select (dot) Not Configured. (see screenshot below)​

B) Click/tap on OK, and go to step 7 below.​

AvgCPULoadFactor_gpedit-2.png

7 You can now close the Local Group Policy Editor if you like.




Option Four

Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus using Registry Editor


This option configures the same policy used in Option Three.


1 Open Registry Editor (regedit.exe).

2 Do step 3 (specify) or step 4 (default) below for what you would like to do.

3 Specify Maximum CPU Usage during Scan by Microsoft Defender Antivirus

This will override Option Two.


A) Navigate to the key below in the left pane of Registry Editor. (see screenshot below)​

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan

If you do not have a Scan key, then right click on the Windows Defender key, click/tap on New, click/tap on Key, type Scan for the name, and press Enter.


AvgCPULoadFactor_regedit-1.png

B) In the right pane of the Scan key, double click/tap on the AvgCPULoadFactor DWORD value to modify it. (see screenshot above)​

If you do not have a AvgCPULoadFactor DWORD, then right click on an empty area in the right pane the Scan key, click/tap on New, click/tap on DWORD (32-bit) Value, type AvgCPULoadFactor for the name, and press Enter.


C) Select (dot) Decimal. (see screenshot below)​

D) Type a value of 0 or 5 to 100 for the maximum CPU usage you want, and click/tap on OK.​

Setting a value of 0 will disable CPU throttling for Microsoft Defender Antivirus allowing it to use as much CPU as it wants during a scan.

50 is the default value.


AvgCPULoadFactor_regedit-2.png

E) You can now close Registry Editor if you like.​

4 Use Default Maximum CPU Usage during Scan by Microsoft Defender Antivirus

This is the default setting to allow Option Two.


A) Navigate to the key below in the left pane of Registry Editor. (see screenshot below)​

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan

B) In the right pane of the Scan key, right click on the AvgCPULoadFactor DWORD value, and click/tap on Delete.​

AvgCPULoadFactor_regedit-3.png

C) Click/tap on Yes to confirm. (see screenshot below)​

AvgCPULoadFactor_regedit-4.png

D) You can now close Registry Editor if you like.​


That's it,
Shawn Brink


 

Attachments

  • Windows_Security.png
    Windows_Security.png
    6 KB · Views: 43
Last edited:
Mine isn't showing anything. . lol
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 23H2 v22631.3447
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built Myself in 2013
    CPU
    AMD Ryzen 1800X 8-Core @ 3.60GHz
    Motherboard
    Asus Crosshair VI Hero
    Memory
    16GB G.Skill Trident Z RGB Series
    Graphics Card(s)
    AMD Radeon RX 580 8GB GDDR5
    Sound Card
    On Board
    Monitor(s) Displays
    Samsung 27" , PLANAR 22", eMachine 22"
    Screen Resolution
    1920 X 1080
    Hard Drives
    ~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~ P34A60 512GB NVMe PCIe Gen3x4 M.2
    ~ 3TB WD Red HDD (extra storage)
    ~ SanDisk 250GB SSD
    ~ 2 X 1TB HDD
    ~~~~~~~~~~
    PSU
    Corsair RM850 Fully Modular (850watts)
    Case
    NZXT Phantom 630 CA-PH630-W1
    Cooling
    CORSAIR iCUE H100i RGB PRO XT
    Keyboard
    Logitech K860
    Mouse
    Logitech MX Master
    Internet Speed
    752Mbps (Download) / 537Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
    Other Info
    *This is my Main Computer That I use*
  • Operating System
    Windows 10 Pro x64
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus
    CPU
    AMD A10-5700 APU @ 3.40Ghz
    Motherboard
    Asus CM1745
    Memory
    8GB
    Graphics card(s)
    AMD Radeon R7 350x GDDR5 4 GB
    Sound Card
    On Board
    Monitor(s) Displays
    Dual Monitor Setup ONN 22" Monitors
    Screen Resolution
    1920 X 1080
    Hard Drives
    ~~~~~~~~
    250GB SSD

    500GB HDD
    ~~~~~~~~
    PSU
    350Watt PSU
    Cooling
    Air Cooling
    Mouse
    MX Master
    Keyboard
    Microsoft Ergonomic 4000
    Internet Speed
    752Mbps (Download) / 537Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
    Other Info
    *Computer for Weather Software*
A manual Defender scan was consuming nearly 100% of my CPU, so I tried dialing it back with these settings. They don't apply to manual Defender scans unless "CPU throttling type" is set to "Disabled" (the description for that policy setting is shown below).

But after I set "CPU throttling type" to "Disabled", the manual scan has slowed to a crawl, and MsMpEng.exe consumes hardly any CPU. I let the scan run my entire work day yesterday, and it was still nowhere near complete.

I of course have "Specify the maximum percentage of CPU utilization during a scan" set to "Enabled". I've increased it to "50", but this issue persists. It's as if the setting I changed is a "Consume all available CPU" / "Consume almost no CPU" toggle.

I've tried "gpupdate /force" and even a full reboot and it has made no difference. Thoughts?

CPU throttling type:

This policy setting determines whether the maximum percentage CPU utilization permitted during a scan applies only to scheduled scans, or to both scheduled and custom scans (but not real-time protection). The maximum CPU utilization limit is also referred to as CPU throttling, or a CPU usage limit.

The default value for this policy setting is True, which means CPU throttling is applied only to scheduled scans.

If you either enable or do not configure this setting, CPU throttling will apply only to scheduled scans.

If you disable this setting, CPU throttling will apply to scheduled and custom scans.
 
Last edited:

My Computer

System One

  • OS
    Windows 11 23H2 (OS Build 22631.3296)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Maingear Vybe
    CPU
    AMD Ryzen 5 3600X
    Motherboard
    Gigabyte X570 Gaming X
    Memory
    HyperX Predator RGB DDR4 3200MHz (32 GB total)
    Graphics Card(s)
    NVIDIA GeForce RTX 2070 Super
    Sound Card
    RealTek ALC887 (Onboard)
    Hard Drives
    Seagate FireCuda 520 SSD/NVMe (1 TB)
    PSU
    EVGA 750W SuperNOVA B2 80+ BRONZE
    Cooling
    Maingear Epic 240
    Keyboard
    SteelSeries Apex 3 TKL
    Mouse
    Razer Viper 8KHz
    Internet Speed
    1 Gbps
    Browser
    Brave
    Antivirus
    Microsoft Defender
    Other Info
    No third-party security software
Back
Top Bottom