Microsoft: Recent Windows updates may trigger Remote Desktop failures
Windows updates may cause Remote Desktop failures for non-admin users with Administrator protection enabled.
Run Microsoft?
Get an email when a reviewed story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Microsoft has confirmed that recent Windows updates, specifically KB5124010 and later, can cause Remote Desktop connection failures for non-administrator users when the 'Administrator protection' security feature is enabled. This issue primarily impacts enterprise-managed remote devices configured with Windows security baselines, where Administrator protection is often enabled by default. Microsoft is working on a fix and suggests disabling the feature via policy management as a temporary workaround.
The lesson from this incident
Full lessonMicrosoft's KB5124010 update introduced an unintended conflict between the new 'Administrator protection' security feature and Remote Desktop Protocol (RDP) access for non-administrator users, causing connection failures across enterprise environments. This highlights the inherent risk of deploying security baseline configurations that interact unpredictably with cumulative updates, particularly in managed enterprise fleets. The incident underscores that even well-intentioned security hardening measures can create availability disruptions if not tested against real-world update scenarios before broad rollout. Organizations relying on RDP for remote workforce access face significant operational impact, making robust pre-deployment testing and rapid workaround communication essential capabilities.
What helps against this
How we list vendors
- Automated patch management
Known holes get closed in days, not months.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.