The Antivirus & Antispyware page shows which Antivirus & Antispyware products are installed, not installed, and which are active. This is very helpful for AV migration projects or to help ensure compliance with your AV product installations. The page reports on both third-party and Microsoft Defender installation and activation status.

In order to populate the Antivirus & Antispyware page you must extend hardware inventory to include the AntiSpywareProduct and AntiVirusProduct WMI classes from the root\securitycenter2 namespace. This namespace only exists on Windows 10 and 11. You can only add new inventory classes from the hierarchy’s top-level server by modifying the default client settings. This option isn’t available in custom client settings.  Once imported to the default client settings the new class will become available in your custom client settings.

For more information about adding a new WMI class to Configuration Manager hardware inventory see the Add a New Class section in the How to extend hardware inventory Configuration Manager documentation page.

Skipping this step will not generate any errors however, the “Antivirus & Antispyware” page will not populate. 


  1. Hardware inventory must be enabled.
  2. Permissions to edit the default hardware inventory settings.