This policy setting allows you to define the order in which different definition update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the definition update sources in order. Possible values are: “InternalDefinitionUpdateServer” “MicrosoftUpdateServer” “MMPC” and “FileShares”For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC }If you enable this setting definition update sources will be contacted in the order specified. Once definition updates have been successfully downloaded from one specified source the remaining sources in the list will not be contacted.If you disable or do not configure this setting definition update sources will be contacted in a default order.
Windows Components\Windows Defender\Signature Updates
Machine
At least Windows Server 2012 Windows 8 or Windows RT
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!FallbackOrder; HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!FallbackOrder
WindowsDefender.admx