Microsoft fixes Windows 11 Remote Desktop failures affecting non-admin users with Administrator protection

The fault affects Windows 11 24H2, 25H2, 26H1 and 26H2 Remote Desktop hosts with Administrator protection enabled, after KB5124010 (22 September preview) or later, and returns error 0xC000000D to non-admin users. Microsoft says updates released on or after 28 October fix it; KB5127936 (a non-security preview update) confirms the repair for 25H2 and 26H2, raising builds to 26200.9818 and 26300.9818. Microsoft's 24H2, 25H2 and 26H2 security baselines enable Administrator protection by default, so managed estates should check their hosts. The interim workaround is to reset the 'User Account Control Type Of Admin Approval Mode' policy via Intune or Group Policy, which disables a security feature, so defenders should revert it after patching and verify RDP access with a non-admin account. No CVE is cited.

For security analysts · Written by AI from 3 sources · Wrong?