Microsoft Warns Windows Updates May Break Remote Desktop Connections
Summary
Microsoft says recent Windows updates can prevent non-admin users from connecting to Remote Desktop hosts when Administrator protection is enabled. It recommends temporarily disabling the feature through policy while it works on a fix.
Key points
- The failures may occur after installing the KB5124010 September 2026 preview update or later updates on Windows 11 24H2, 25H2, 26H1, and 26H2.
- Affected connection attempts may fail with error 0xC000000D and the message, “The token that was passed to the function is invalid.”
- The issue primarily affects enterprise-managed remote devices used as Remote Desktop hosts with Administrator protection enabled.
- Microsoft's temporary workaround is for IT administrators to disable Administrator protection through policy management, such as by resetting the relevant policy in Intune or Group Policy.
- Microsoft says it is working on the issue; the article does not report a permanent fix.
Article Details
- Event Type
- Microsoft-confirmed Windows update compatibility issue affecting Remote Desktop connections when Administrator protection is enabled.
- Impact
- Non-admin users may be unable to connect to enterprise-managed remote devices acting as Remote Desktop hosts, with error 0xC000000D. The issue affects Windows 11 24H2, 25H2, 26H1, and 26H2 after KB5124010 or later updates. Microsoft has not yet reported a fix; its temporary workaround is to disable Administrator protection through policy management.
People
Vendors
Products
Group PolicyFor instance, if you use Microsoft Intune or Group Policy, you'll need to reset the "User Account Control Type Of Admin Approval Mode" policy.Microsoft IntuneFor instance, if you use Microsoft Intune or Group Policy, you'll need to reset the "User Account Control Type Of Admin Approval Mode" policy.Microsoft Security Compliance Toolkit"If your organization uses Windows security baselines, published through the Microsoft Security Compliance Toolkit, Administrator protection is enabled by default in Windows 11, version 24H2, 25H2, and 26H2 securityMicrosoft WindowsMicrosoft: Recent Windows updates may trigger Remote Desktop failuresRemote DesktopMicrosoft: Recent Windows updates may trigger Remote Desktop failures