When Administrator protection is enabled, it prompts standard users to authenticate with Windows Hello (PIN or biometric) when they try to change the Windows Registry or install new apps. This feature began rolling out in October 2025 and is now enabled by default in organizations using Windows security baselines after installing the October 2026 Windows security update.
Microsoft acknowledged on October 13 that Remote Desktop connections may fail with error 0xC000000D after installing the KB5124010 September 2026 non-security preview update (or Windows updates released since then) on systems running Windows 11 24H2 and later. "This issue primarily affects enterprise-managed remote devices used as Remote Desktop hosts with Administrator protection enabled, regardless of how the feature was enabled," it said. On Wednesday, Microsoft confirmed that this issue is fixed for users who installed this month's KB5127936 preview update.
