Microsoft has identified a Remote Desktop issue affecting non-admin users on Windows 11, which can prevent them from connecting to remote computers with Administrator protection enabled This article explores 11 administrator protection. . This problem occurs after the September 22, 2026, non-security preview update, KB5124010, or later updates.

It primarily impacts company-managed computers used as Remote Desktop hosts, where failed connections may return error 0xC000000D and display the message, "The token that was passed to the function is invalid." Microsoft opened the issue on October 13 and updated its status to "Mitigated" that same day. Support teams investigating matching failures should verify installed Windows updates, confirm reported errors, and review whether Administrator protection is active before making policy adjustments.

According to ZeroOwl's coverage of Windows 11's Administrator protection, this feature creates a separate, temporary admin token after the user approves an administrative task. This workaround involves resetting the "User Account Control Type of Admin Approval Mode" policy through Microsoft Intune or Group Policy. Since this removes an added security measure, organizations should limit the change to affected devices and document the exception for future review.

ZeroOwl previously reported on Remote Desktop credential prompt failures.