Your organization uses Intune with Microsoft Defender Antivirus managed through an Endpoint security Antivirus policy. Security operations reports that a subset of Windows 11 devices are not running a weekly full scan, even though the policy specifies one. Investigation shows these devices are frequently powered off during the scheduled scan window. You must ensure the full scan still runs reliably without requiring the device to be on at the exact scheduled time. Which Defender Antivirus setting should you configure in the policy?