When you use MpCmdRun.exe with the -GetFiles parameter to generate a log file for Windows Update, MpCmdRun.exe does not collect the MpCmdRun file on a 64-bit computer that is running Windows Server 2003

You use MpCmdRun.exe together with the –GetFiles parameter to generate a support log file for Microsoft Windows Defender. However, this tactic does not generate the MpCmdRun.log file in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder as expected on a computer that is running Microsoft Windows Server 2003 x64 Edition or that is running Microsoft Windows Server 2003 for Itanium-based Systems.

This issue occurs because MpCmdRun.exe creates a log file that is named MpCmdRun-System.log. This log file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder.

When you run MpCmdRun.exe together with the –GetFiles parameter on a 64-bit computer, MpCmdRun.exe copies the MpCmdRun.log file from the %Windir%\Temp folder, and then MpCmdRun.exe creates a new file that is named MpCmdRun-System.log. This file exists in the %AllUsersProfile%\Application Data\Microsoft\Windows Defender\Support folder. MpCmdRun.exe also copies the MpCmdRun.log file from the NetworkServices temporary folder and creates a file that is named MpCmdRun-NetworkService.log. The file exists in the same folder as the MpCmdRun-System.log file.