Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Output of WMI API doesn't reflect after changing local group policy setting for AV update RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We execute WMI API "Get-Wmiobject -ComputerName xxxxx -nameSpace root/SecurityCenter2 -Class AntiVirusProduct" to get product state of antivirus product, through which we understand statement of health details.

    We also see this option specific to windows 8.1/10 called "Define the number of days before antivirus definitions are considered out of date" if we navigate to "Start->gpedit.msc->Computer Configuration->Administrative Templates->Windows Components->Windows Defender->Signature Updates". By changing the configuration of this option we expect change in product state output. But we don't see any impact on WMI product state values.

    Can you please share what's the significance of this option and if it has any impact on WMI API product state values?


    Thanks advance for your help.

    • Moved by Stanly Fan Tuesday, July 18, 2017 8:50 AM from windows form general
    Monday, July 10, 2017 5:00 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Kajal,

    So which project have you created? Windows Form? Or WPF? Or UWP? Or ...

    Are there some error messages show and what are they when you try to execute the commend?

    Best Regards,

    Stanly

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    Tuesday, July 11, 2017 5:53 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Stanly,

    Thanks for looking into this and replying

    We tried with running WMI API calls from Windows Powershell and also we have C++ project which calls the mentioned WMI API calls to obtain the product state of the antivirus product.

    As mentioned above, we are not seeing any difference in the product state returned by the WMI API call in both Powershell and C++ project. It returns the same productstate value even after changing the "Signature Updates" field.

    Let me know if you are looking for any additional details on this.

    Best Regards,

    Kajal

    Tuesday, July 11, 2017 11:47 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Kajal,

    This forum is discussing and asking questions about the Windows Form and ClickOnce, it will be more appropriate to ask your question at Windows Defender Advanced Threat Protection (ATP) Support Forum or Windows PowerShell Forum.

    Thank you for your understanding.

    Best Regards,

    Stanly

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    Wednesday, July 12, 2017 9:39 AM