Microsoft has resolved an issue that prevents non-admin users from connecting to devices via Remote Desktop when the 'Administrator protection' security feature is enabled.

The vulnerability or weakness

The issue was caused by recent Windows updates, particularly the KB5124010 September 2026 non-security preview update, which prompted standard users to authenticate with Windows Hello when trying to change the Windows Registry or install new apps.

Earlier attacks and coverage

Business impact

This issue primarily affected enterprise-managed remote devices used as Remote Desktop hosts, potentially disrupting operations and requiring IT administrators to address the problem promptly.

Industries affected

This issue impacted organizations across various sectors, including enterprise IT and remote work environments.

Users affected

Standard users and IT administrators in organizations using Windows 11 24H2 and later versions were affected, as they might face Remote Desktop connection failures.

Watch the daily brief

Sources