Shorten full-scan time in Microsoft Defender on Windows 11 by excluding safe large folders, enabling parallel scans and tuning the schedule.
Exclusions reduce scanning inside those paths. Only exclude folders whose contents you control.
A full scan on Windows 11 crawls every file including backups and VMs. Add **targeted exclusions**, raise the **CPU limit** when idle, and schedule scans at idle time to cut scan length without weakening protection.
Open **Windows Security → Virus & threat protection → Scan options**, start a **Full scan**, and note the start time. When it completes, calculate the duration. This is your baseline.
Run this in an elevated PowerShell to see current signature date, scan age and scan avg CPU load. Keep the output; you will compare after tuning.
Get-MpComputerStatus | Select-Object AMEngineVersion, AntivirusSignatureLastUpdated, QuickScanAge, FullScanAge
Get-MpPreference | Select-Object ScanAvgCPULoadFactor, DisableArchiveScanning, ExclusionPathOpen **Virus & threat protection → Manage settings → Exclusions → Add or remove exclusions**. Add folders that are both huge and inherently safe: Steam game installs, Hyper-V/VMware VM folders, Veeam/Macrium image stores, developer build output folders.
The default caps Defender at 50 percent CPU. Raise it to 70 so scheduled scans finish faster. The limit only applies to on-demand and scheduled scans, not real-time protection, so it does not change your day-to-day CPU usage.
Set-MpPreference -ScanAvgCPULoadFactor 70Open **Task Scheduler → Microsoft → Windows → Windows Defender → Windows Defender Scheduled Scan**. Edit the trigger to run at a time your PC is on but idle (lunch, overnight if you leave it on). Enable **Run only when the computer is idle**.
Archive scans are slow on huge zip collections. If your archives are backups you trust, you can skip them for scheduled scans while keeping real-time protection on. Reverse the flag any time.
Set-MpPreference -DisableArchiveScanning $trueStart a fresh full scan and record the new duration. Compare to the baseline. If you still want it faster, add one more safe exclusion at a time and re-measure.
Start-MpScan -ScanType FullScanConfirm the exclusion path is exact and does not have a trailing slash issue. Re-check in Virus & threat protection → Exclusions.
Lower ScanAvgCPULoadFactor back to 50 with Set-MpPreference -ScanAvgCPULoadFactor 50 in elevated PowerShell.
The PowerShell window is not elevated. Right-click PowerShell and choose Run as administrator.
Yes, inside the excluded folder. That is why exclusions must be folders you control and trust. Real-time protection still scans files when they are opened outside those folders.
Quick scans cover the areas malware most commonly lives. A monthly full scan is a reasonable belt-and-braces addition.
Not necessarily, and it disables Defender's real-time engine. Tune Defender first before switching.
Remove any exclusions you added in Virus & threat protection → Exclusions. Reset the CPU limit with Set-MpPreference -ScanAvgCPULoadFactor 50 and re-enable archive scanning with Set-MpPreference -DisableArchiveScanning $false in elevated PowerShell. Reset the Task Scheduler trigger to its original time if you changed it.
Free · no account needed · tracks your progress