[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fee8rwbgFqGe2ag9HVIizzuiwZGNZhBbT7bcpPjZfVNM":3},{"article":4,"iocs":37,"watch_terms":38,"solutions":39,"lesson":85},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"fc9d8942-b2e4-4552-8419-7f56796e063c","Microsoft: Recent Windows updates may trigger Remote Desktop failures","microsoft-recent-windows-updates-may-trigger-remote-desktop-failures-f5ce88","Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the \"Administrator protection\" security feature is enabled. [...]","Microsoft has confirmed that recent Windows updates, specifically KB5124010 and later, can cause Remote Desktop connection failures for non-administrator users when the 'Administrator protection' security feature is enabled. This issue primarily impacts enterprise-managed remote devices configured with Windows security baselines, where Administrator protection is often enabled by default. Microsoft is working on a fix and suggests disabling the feature via policy management as a temporary workaround.","Windows updates may cause Remote Desktop failures for non-admin users with Administrator protection enabled.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmicrosoft-recent-windows-updates-may-trigger-remote-desktop-failures\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F14\u002FWindows_headpic.jpg","2026-10-14T10:48:09+00:00","2026-10-14T12:00:11.017992+00:00",7,[17,20,22,25,27],{"name":18,"type":19},"Windows 11","product",{"name":21,"type":19},"Remote Desktop",{"name":23,"type":24},"Microsoft","vendor",{"name":26,"type":19},"KB5124010",{"name":28,"type":19},"Microsoft Intune","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},[],[23,18,21],{"controls":40,"vendors":81},[41,69],{"slug":42,"name":43,"problem":44,"products":45},"patch-management","Automated patch management","Known holes get closed in days, not months.",[46,54,61],{"vendor_slug":47,"vendor_name":48,"vendor_logo":49,"product_slug":50,"product_name":51,"url":52,"description":53},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":42,"product_name":58,"url":59,"description":60},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":70,"name":71,"problem":72,"products":73},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[74,75],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},{"vendor_slug":76,"vendor_name":23,"vendor_logo":77,"product_slug":78,"product_name":28,"url":79,"description":80},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[82],{"slug":76,"name":23,"logo_path":77,"roles":83},[84],"affected",{"slug":86,"title":87,"body":88,"framework_refs":89,"framework_notes":97},"windows-update-breaks-remote-desktop-for-non-admin-users","Windows Update Breaks Remote Desktop for Non-Admin Users","Microsoft's KB5124010 update introduced an unintended conflict between the new 'Administrator protection' security feature and Remote Desktop Protocol (RDP) access for non-administrator users, causing connection failures across enterprise environments. This highlights the inherent risk of deploying security baseline configurations that interact unpredictably with cumulative updates, particularly in managed enterprise fleets. The incident underscores that even well-intentioned security hardening measures can create availability disruptions if not tested against real-world update scenarios before broad rollout. Organizations relying on RDP for remote workforce access face significant operational impact, making robust pre-deployment testing and rapid workaround communication essential capabilities.",[90,91,92,93,94,95,96],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-17: Remote Access","ITIL Change Management: Change Evaluation and Testing","NIST SP 800-40: Guide to Enterprise Patch Management Planning",{}]