Microsoft says Windows updates released October 28, 2026, including KB5127936 and later updates, resolve a specific Windows 11 Remote Desktop failure. The issue affected non-administrator users connecting to remote PCs with Administrator protection enabled, primarily enterprise-managed devices used as Remote Desktop hosts. Microsoft associated the failure with error 0xC000000D. Microsoft’s release-health notice identifies the affected configuration and fix.
Which Windows 11 systems were affected?
Microsoft lists Windows 11 24H2, 25H2, 26H1 and 26H2 as affected client versions. The failure could occur when a non-admin user tried to connect to a host with Administrator protection enabled. Microsoft ties the issue to the September 2026 non-security preview update KB5124010 and later updates before the fix. The error could appear as 0xC000000D, with the message “The token that was passed to the function is invalid.”
Microsoft lists no affected Windows Server platform for this issue. The affected Windows 11 versions and conditions are specific to this Remote Desktop failure.
This issue is separate from the September Windows 11 corrections covered in NeoTeo’s earlier update report: Microsoft links this failure to KB5124010 and Administrator protection.
Which update resolves the Remote Desktop failure?
Microsoft identifies updates released October 28, 2026, including KB5127936, and later updates as resolving the issue. The company recommends installing the latest security update. That resolution threshold does not establish whether a particular PC has received or installed the update.
Temporary mitigation for IT administrators
For an affected device that remains on an earlier update, an IT administrator can temporarily turn off Administrator protection by resetting the User Account Control Type Of Admin Approval Mode policy through Microsoft Intune or Group Policy. This is Microsoft’s documented mitigation; the updates released October 28, 2026, and later resolve the issue.
