Microsoft fixes Windows 11 Remote Desktop failures after recent updates
Original title: Microsoft Fixes Remote Desktop Connection Failures Following Recent Updates
Non-admin sessions failed with error 0xC000000D on hosts using Administrator protection after the September 22 preview.
Microsoft fixed a Windows 11 bug that stopped non-admin users from connecting over Remote Desktop when Administrator protection was enabled. The failure followed the September 22 non-security preview KB5124010 or later updates and showed the message that the token passed to the function was invalid. Enterprise-managed computers acting as Remote Desktop hosts are the main systems affected. Updates released on or after October 28 resolve it, including preview KB5127936 for Windows 11 25H2 and 26H2.
- Affected platforms are Windows 11 24H2, 25H2, 26H1, and 26H2; Windows Server is not listed.
- Microsoft opened its investigation on October 13 and shipped fixes on October 28.
- KB5127936 raises 25H2 and 26H2 to builds 26200.9818 and 26300.9818.
- Security baselines for 24H2, 25H2, and 26H2 enable Administrator protection by default.
- A temporary workaround resets the User Account Control admin-approval policy.
Impact: Non-admin Remote Desktop connections fail on affected hosts
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Windows 11 | 24H2, 25H2, 26H1, and 26H2 after KB5124010 or later | Updates on or after October 28; KB5127936 for 25H2 and 26H2 |
- 1.Install the latest security update for the device, or KB5127936 on Windows 11 25H2 and 26H2.
- 2.Until patched, temporarily reset User Account Control admin-approval mode via Intune or Group Policy.
- 3.After the fix, test Remote Desktop with a non-admin account and remove the workaround.
- Vendors
- Microsoft
- Products
- Windows 11Remote Desktop
From the original article
2 min read at cybersecuritynews.com
Microsoft resolved a Windows 11 issue that blocked non-admin users from connecting via Remote Desktop when Administrator protection was enabled, releasing fixes on October 28, 2026, for connection failures with error 0xC000000D. The bug appeared after the September 22 non-security preview update, KB5124010, or later updates. Affected users could see the message, “The token that […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.