Vulnerability Management, Patch/Configuration Management

Windows updates cause Remote Desktop connection issues with Administrator protection

Windows Key on a new Dell Latitude 7420 laptop keyboard. Several Dell Latitude models are among those affected by "ReVault" vulnerabilities.

Coverage from Bleeping Computer indicates that recent Windows updates are causing problems for non-administrator users attempting to connect to devices via Remote Desktop when the Administrator protection security feature is enabled.

The issue primarily affects enterprise-managed remote devices running Windows 11 versions 24H2, 25H2, 26H1, and 26H2. Administrator protection, designed to enforce standard user permissions and require elevated authentication for app installations or registry changes, is now enabled by default in many organizations using Windows security baselines after the October 2026 update. Microsoft confirmed that installing the KB5124010 September 2026 preview update or later versions can lead to Remote Desktop connection failures with error 0xC000000D. A temporary workaround involves IT administrators disabling Administrator protection via policy management tools like Microsoft Intune or Group Policy by resetting the "User Account Control Type Of Admin Approval Mode" policy. This is not the first time such issues have occurred, as Microsoft previously addressed similar Remote Desktop and RDS connection failures in March 2025 and released emergency updates in September 2026 for Windows Server devices.

Source: Bleeping Computer

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds