Windows Defender Update Stuck or Failing? Fix It Fast

Start Here: The 30-Second Fix That Works Most Often

Before you go digging into logs or running commands, check the two things that cause 80% of these failures: date/time and internet connectivity.

1. Right-click the clock in your system tray and pick Adjust date/time.
2. Toggle Set time automatically off, wait 5 seconds, then toggle it back on.
3. Click Sync now under Synchronize with an internet time server.

If that doesn't do it, run this from an admin command prompt to reset the Windows Update cache in 30 seconds flat:

net stop wuauserv
net stop bits
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
net start wuauserv
net start bits

Then check for Defender updates in Settings > Update & Security > Windows Security > Virus & threat protection. If it works, you're done. If not, move to the next section.

The Moderate Fix: Reset Windows Update Components (5 Minutes)

Still stuck? The culprit here is almost always corrupted update components. The built-in Windows Update troubleshooter is a crap shoot — I've seen it fix nothing half the time. Use this instead.

Open an admin PowerShell window (right-click Start, pick Windows PowerShell Admin) and run this:

DISM.exe /Online /Cleanup-image /Restorehealth

That repairs the system image. It takes 2-5 minutes. Once it finishes, run:

sfc /scannow

Let it complete. It replaces corrupted system files. After both pass, restart your machine. Then manually trigger the Defender update by going to Settings > Update & Security > Windows Security > Virus & threat protection > Check for updates.

If it's still broken, the update service itself is probably hosed. From that same admin PowerShell, run:

# Stop the services
Stop-Service -Name wuauserv -Force
Stop-Service -Name bits -Force
Stop-Service -Name dosvc -Force
# Delete old cache
Remove-Item -Path "C:\Windows\SoftwareDistribution" -Recurse -Force
# Restart
Start-Service -Name wuauserv
Start-Service -Name bits
Start-Service -Name dosvc

Then run the Defender update again. This clears the cache and forces the services to restart clean. I've fixed dozens of machines with this exact sequence.

The Advanced Fix: Manual Update or Reset via PowerShell (15+ Minutes)

If you've tried both above and Defender still won't update, something deeper is wrong. Don't bother with third-party fix-it tools — they rarely help and sometimes break things worse.

First, check if your copy of Windows is activated. Unactivated Windows has a habit of blocking Defender updates. Run slmgr.vbs /dli in an admin command prompt. If it says anything other than Licensed, that's your problem. Fix activation first.

If licensed, grab the latest Defender definitions manually from Microsoft's site. This bypasses the update service entirely. Go to this URL in your browser:

https://www.microsoft.com/en-us/wdsi/defenderupdates

Download the Windows Defender Antivirus for Windows 10 and Windows 11 (64-bit) file. It's a small .exe. Run it as admin. It'll update the definitions directly.

If the manual update works but automatic still fails, do a full Windows Update reset. From an admin PowerShell, run:

# Full reset
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Then restart. Open Windows Update and check for updates. This rebuilds the update database from scratch.

One last thing: If you're on Windows 11 22H2 or later, Microsoft changed how Defender updates work in some Insider builds. If you're on a preview build, switch to Release Preview or stable in Windows Update settings. Preview builds get funky with Defender sometimes.

You've now exhausted every fix I've ever needed for this error. If it's still not updating, you're looking at a corrupt OS install — back up your data and run a Windows 10/11 repair install using the Media Creation Tool. That's rare, but it happens.