Microsoft Defender Antivirus is changing its support plan for the anti-malware scan "engine update" (MpEngine.dll) to only support N-2 versions. This is due to new security intelligence update logic being dependent on newer scan engine logic, and to ensure customers are not running an older scan engine version with a known vulnerability. The changes will take effect on May 1, 2024. To be fully supported, keep current with the latest engine updates. Minimum requirements are version 1.1.23110.2, version 1.1.24010.10, or newer.
Microsoft Defender Antivirus is rolling out an update to the support plan for the anti-malware scan "engine update" (MpEngine.dll). To align with the current Defender Antivirus platform update, only N-2 versions will be supported.
Reasons:
When this will happen:
General Availability (Worldwide, GCC, GCC High, DoD, USNat, and USSec): The changes will take effect May 1, 2024.
How this will affect your organization:
To be fully supported, keep current with the latest engine updates. Our support structure is dynamic, evolving into two phases depending on the availability of the latest engine version:
What you need to do to prepare:
Please make sure that you have a supported mpengine.dll version installed. Minimum requirements are version 1.1.23110.2, version 1.1.24010.10, or newer.
To check your engine updates version in your environment:
1. In Microsoft Defender for Endpoint Plan 2, Microsoft Defender for Endpoint Plan 1, and Microsoft Defender for Business, go to:
Security.microsoft.com > Reports > Endpoints > Device Health > Microsoft Defender Antivirus Health > Antivirus engine version
2. In Microsoft Defender for Endpoint Plan 2 and Microsoft Defender for Business, you can run an Advanced Hunting query and review the results of AVEngineVersion.
Learn more: Microsoft Defender Antivirus security intelligence and product updates | Microsoft Learn