Microsoft says recent Windows updates can break Remote Desktop for some users

The issue affects enterprise-managed hosts that rely on RDP and have Administrator protection turned on.

Microsoft says recent Windows updates can break Remote Desktop for some non-admin users when Administrator protection is turned on, which is a problem for enterprise-managed devices that rely on RDP access. The issue is tied to update KB5124010, the September 2026 non-security preview release, and later updates on Windows 11 24H2, 25H2, 26H1, and 26H2. Affected users may see error 0xC000000D and the message that the token passed to the function is invalid. Microsoft is still investigating and recommends temporarily disabling Administrator protection through policy, including resetting the "User Account Control Type Of Admin Approval Mode" setting in Intune or Group Policy.