Windows updates broke Remote Desktop for non-admins. The fix is still not out.
By Lior AharonovFounder, 7IT Solutions ·
Microsoft confirmed on 13 October 2026 that Remote Desktop can fail with error 0xC000000D, "The token that was passed to the function is invalid," for non-admin users. It needs Administrator protection on and the September preview update KB5124010 or later, on Windows 11 24H2, 25H2 and 26H2, per BleepingComputer. Microsoft is still working on a fix.
Picture a remote developer or contractor who logs in every morning and today gets a token error. Machines under Windows security baselines get Administrator protection on by default after the October 2026 security update.
If you manage Windows 11 devices used as Remote Desktop hosts, disable Administrator protection through Intune or Group Policy by resetting the User Account Control Type Of Admin Approval Mode policy. Leave it off until Microsoft ships the fix.
A security feature switched on by default is a bargain until a login stops working. Test the baseline on one machine first.
Lior Aharonov · my takeSources
Researched with AI tools; every fact is checked against the linked sources.