Microsoft offers a permanent fix for a known Remote Desktop problem. Users could not establish a Remote Desktop connection when administrator protection was enabled.
Microsoft has been struggling with Remote Desktop problems in Windows 11 for a while. After the optional update of September 2026, users without administrator rights could not establish a Remote Desktop connection to a device with administrator protection enabled. Disabling the feature was the only workaround. The company already released an emergency patch, but it did not deliver the desired result. Now Microsoft has come up with a permanent fix after all.
Administrator protection
After the optional preview update KB5124010 of September 2026, or a later update, users without administrator rights sometimes could no longer establish a Remote Desktop connection to a device with administrator protection turned on. The connection then fails with error code 0xC000000D and a message saying the supplied token is invalid.
The feature was rolled out in October 2025 and enabled by default in organisations after the installation of the Windows Security Update of October 2026. The only temporary workaround was to disable the feature. The problem affected Windows 11 versions 24H2, 25H2, 26H1 and 26H2.
Problem solved
Microsoft now offers a permanent fix with update KB5127936 of 28 October 2026. Anyone who installs that update or a later one does not need to do anything else. On devices with an older update, IT administrators can still temporarily disable administrator protection via Intune or group policy. They do this by resetting the policy for the User Account Control type in Admin Approval Mode.