ScheduleTime specifies the time of day when
Windows® Defender will run a scheduled full scan in order to
Specifies <time> as a number represented as the number of minutes past midnight:
For example, 120 (0x00000078) is equivalent to 02:00 AM in the local time on the computer where the full scan will run.
Valid Configuration Passes
For Windows Server® 2012, Windows Server® 2008 R2 and Windows Server® 2008, Windows Defender is installed with the Desktop Experience Pack.
For a full list of the Windows editions and architectures that this component supports, see Security-Malware-Windows-Defender.
The following XML output shows how to specify that Windows Defender will run a scan at 02:00 AM in the local time on the computer on the day as specified by ScheduleDay.