Act this weekWhat happenedMicrosoft fixed a bug where recent Windows updates blocked non-admin users from connecting through Remote Desktop when Administrator protection was on.
Who is affectedBusinesses with managed Windows 11 24H2 or later computers used as Remote Desktop hosts with Administrator protection enabled.
What to do- 1Ask your IT team whether your remote-access computers got the KB5127936 update or a newer one.
- 2Install the latest Windows security update on affected devices.
- 3If you cannot update yet, have IT reset the Admin Approval Mode policy in Intune or Group Policy.
- 4Plan to turn Administrator protection back on after the update is installed.
Microsoft has fixed a problem that stopped regular, non-admin users from connecting to office computers through Remote Desktop. The tool lets you use a work PC from another location. The failure showed up as error code 0xC000000D, and it hit computers with a security feature called Administrator protection turned on.
What happened
Administrator protection asks standard users to prove who they are with Windows Hello, meaning a PIN or a fingerprint or face scan, before they change the Registry or install new apps. The Registry is a database of core Windows settings. The feature began rolling out in October 2025.
Microsoft says the trouble started with the September 2026 preview update, KB5124010, and with Windows updates released since then. It acknowledged the problem on October 13. It affects Windows 11 version 24H2 and later.
The fix
Microsoft says the issue was resolved by the Windows updates released October 28, 2026 (KB5127936), and later. It recommends installing the latest security update, which also contains other fixes.
There is a temporary option for companies that would rather wait for next month's Patch Tuesday updates. Patch Tuesday is Microsoft's regular monthly update release. The workaround has IT administrators switch off Administrator protection by resetting a policy called User Account Control Type Of Admin Approval Mode, using Microsoft Intune or Group Policy. Those are tools IT teams use to manage many computers at once.
Who it affects
Microsoft says the problem mainly hits company-managed computers that other people log into remotely, with Administrator protection on. That is true however the feature was switched on. Administrator protection is now on by default in organizations that use Windows security baselines, after the October 2026 security update. If you do not log into a work PC from afar, this bug is unlikely to touch you.
The alert box above lists what to ask your IT team and what to do next. The key point is to confirm the remote-access computers are up to date.
What happens next
This is not the first Remote Desktop stumble. Microsoft fixed a similar issue in March 2025. Last month it also released emergency updates to repair Remote Desktop Services failures caused by the September 2026 security updates.
The material does not say how many computers were affected. Anyone who used the workaround should plan to turn Administrator protection back on once the update is installed.
The takeawayIf staff log into office PCs remotely, ask IT to confirm those PCs have the KB5127936 update or a newer one.