Microsoft has acknowledged an issue where non-admin users are unable to establish Remote Desktop connections to devices after installing recent Windows updates. This problem specifically arises when the "Administrator protection" security feature is active on the target device.
The "Administrator protection" feature, which began rolling out with the KB5067036 preview update in October 2025 for Windows 11 24H2/25H2, is now enabled by default in organizations utilizing Windows security baselines after the October 2026 Windows security update. When active, this feature ensures that logged-in users operate with standard user permissions and requires Windows Hello authentication for actions like installing applications or modifying the registry.
The connection failures manifest with error 0xC000000D and the message "The token that was passed to the function is invalid." This issue impacts systems running Windows 11 24H2/25H2/26H1/26H2 that have installed the KB5124010 September 2026 non-security preview update or subsequent updates. Enterprise-managed remote devices configured as Remote Desktop hosts with Administrator protection enabled are primarily affected.
While Microsoft works on a permanent fix, a temporary workaround involves IT administrators disabling Administrator protection. This can be achieved through policy management methods such as Microsoft Intune or Group Policy, by resetting the "User Account Control Type Of Admin Approval Mode" policy.
This is not the first time Microsoft has addressed Remote Desktop connection problems following updates. A similar issue causing Remote Desktop and RDS connection failures was fixed in March 2025, affecting updates released since January 2025. Additionally, emergency out-of-band updates were released last month to resolve Remote Desktop Services failures on Windows Server devices caused by the September 2026 security updates.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
Microsoft confirmed that recent Windows updates can prevent non-admin users from connecting via Remote Desktop if the "Administrator protection" feature is enabled. This issue affects enterprise-managed remote devices and results in error 0xC000000D, requiring IT admins to disable the protection as a temporary workaround.