Scheduled scan running eventough it has been disabled in antimalware policies

Hello All,

We are running SCCM 2012 R2 SP1 CU2.
We have a vdi deployment on which we do not want any scheduled scan to run.

In the anti-malware policies, I have scheduled scans set to no which disables all child properties for the scheduled scans settings.

I have it deployed to the collection which holds all our VDI machines.

However users have reported to seeing scans running.

After investigation I found that there is a scheduled active on the VDI's called'Microsoft Antimalware Scheduld Scan'.
It runs a commandline: MpCMDRun.exe Scan -Schedulejob -RestrictPrivileges

The runtime on which to start seems to be a different time on each vdi, but it is set to run daily.

Does anybody have an idea where this comes from?

Thanks!