Microsoft releases Remote Desktop fix for Windows 11 25H2 and 26H2
Microsoft says its October 28 optional update restores non-admin connections on affected hosts without turning off Administrator protection.
Microsoft says its October 28 optional update restores non-admin connections on affected hosts without turning off Administrator protection.

Microsoft says its October 28, 2026 KB5127936 optional preview update fixes a Remote Desktop failure on Windows 11 versions 25H2 and 26H2. Users without administrator rights can again connect to affected remote computers while those computers keep Administrator protection enabled.
The failure followed the September 22 KB5124010 non-security preview and later updates. Microsoft says it primarily affects enterprise-managed computers acting as Remote Desktop hosts—the computers users connect to—with Administrator protection enabled, regardless of how it was enabled. Connections can fail with error 0xC000000D and the message, “The token that was passed to the function is invalid.” The relevant protection setting is on the host, not the connecting device.
| Version or edition | KB5127936 build | Update position |
|---|---|---|
| 26H2 | 26300.9818 | Optional preview available |
| 25H2 | 26200.9818 | Optional preview available |
| 24H2 Home and Pro | Not covered | Updates ended October 13, 2026 |

The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
| 24H2 Enterprise and Education | Not covered | Monthly security updates continue through October 12, 2027 |
September’s KB5124010 was the final non-security preview for 24H2. Microsoft still directs affected 24H2 hosts to the temporary workaround. Home and Pro administrators cannot rely on another routine security update for those editions: their support has ended, including known-issue fixes.
BleepingComputer said Microsoft acknowledged the failure on October 13. The outlet describes Administrator protection as requiring standard users to authenticate with a PIN or biometrics before sensitive changes, such as installing applications or editing the Windows Registry, a database of system settings. The feature began rolling out in October 2025 and became enabled by default for organizations using Windows security baselines after the October 2026 security update.
Microsoft confirms that its security baselines—standard security-policy settings—for 24H2, 25H2 and 26H2 enable Administrator protection unless an organization changes the policy. That default places enterprise-managed Remote Desktop hosts within the conditions affected by the failure.
For hosts that still need mitigation, Microsoft specifies temporarily turning off Administrator protection. Administrators must reset the “User Account Control Type Of Admin Approval Mode” policy through Microsoft Intune or Group Policy. Microsoft says hosts receiving KB5127936 or a later fixed update no longer need that workaround, including hosts where administrators previously disabled the protection.
On eligible devices, Microsoft lists the preview under Settings > Windows Update > Advanced options > Optional updates. Administrators can download and install it there rather than wait for the next monthly security release.
BleepingComputer describes November’s Patch Tuesday cumulative updates as the alternative for administrators who prefer to wait, using the temporary workaround in the meantime. Microsoft has not confirmed a November release date or a version-by-version rollout for this fix, including whether November’s security update will resolve it on 24H2.
For administrators who need continued access to non-security previews, Microsoft recommends upgrading from 24H2 to a newer Windows 11 version.

The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min

The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min