Microsoft Addresses Remote Desktop Connection Issues for Non-Admin Users
Microsoft has released updates to resolve a Remote Desktop connection problem that affected non-administrator users on Windows 11 when Administrator protection was enabled.
Microsoft has issued a fix for a critical Remote Desktop connection issue that prevented non-administrator users from accessing remote systems on Windows 11. The problem, which emerged following September 22, 2026, updates when the Administrator protection feature was active, resulted in connection failures with error code 0xC000000D and the message, “The token that was passed to the function is invalid.” Microsoft initiated its investigation into the matter on October 13, 2026.
The bug primarily impacted enterprise-managed computers configured as Remote Desktop hosts. Administrator protection is a security feature designed to limit the scope and duration of administrator privileges granted to applications, thereby reducing the risk of malware making unauthorized system changes. This setting is often enabled by default in managed environments, particularly in Windows 11 versions 24H2, 25H2, and 26H2, unless explicitly disabled by an organization.
Microsoft's release health notice confirmed that updates released on or after October 28, 2026, contain the resolution. Specifically, update KB5127936 addresses the bug for Windows 11 versions 25H2 and 26H2, bringing their builds to 26200.9818 and 26300.9818, respectively. While this specific KB number applies to those versions, administrators managing other affected Windows 11 releases should ensure they install the appropriate fixed update for their environment.
Prior to the official fix, a temporary workaround involved disabling Administrator protection through management tools like Microsoft Intune or Group Policy by resetting the “User Account Control Type Of Admin Approval Mode” policy. However, Microsoft strongly advises against leaving this security feature disabled permanently. Once the applicable fixed update is deployed, IT teams should verify that Remote Desktop access is functioning correctly for non-admin users and revert any temporary policy changes.
This issue highlights the importance of Microsoft's ongoing efforts to maintain the stability and security of its Remote Desktop services. While the problem was specific to non-admin users and the Administrator protection feature, it underscores the potential for even seemingly minor configuration changes or updates to introduce unexpected connectivity problems.
Users and administrators are encouraged to install the latest available security updates for their Windows 11 systems to ensure they have the most comprehensive protection and benefit from all resolved issues and improvements. This proactive approach helps mitigate risks associated with both known vulnerabilities and potential future threats.