Free tools Windows power users keep installed
One-click scans. No signup required.
Microsoft has confirmed two separate Remote Desktop problems tied to recent Windows updates. The September 8, 2026 security updates could destabilize Remote Desktop Services (RDS), causing failed connections, sign-in errors and configuration hangs. A different Windows 11 Administrator-protection defect could return error 0xC000000D for non-administrators. Install the applicable September 14 out-of-band or October 13 cumulative update before changing security policy.
Which Remote Desktop problem are you seeing?
| Symptoms | Likely issue | Microsoft fix |
|---|---|---|
| Connection fails after several minutes, sign-in fails, or a server remains at “Please wait for the Remote Desktop Configuration” | September 2026 RDS instability | September 14, 2026 out-of-band (OOB) update or a later cumulative update |
Non-administrator connection fails with 0xC000000D and “The token that was passed to the function is invalid.” |
Windows 11 Administrator-protection issue | Updates released October 13, 2026 or later |
| Session freezes shortly after connecting, or an older RDS host disconnects after about 65 seconds over UDP | Earlier 2025 RDP regressions | KB5052093 for freezes; KB5053656 for the 65-second UDP disconnect |
These are documented issues affecting particular update paths and environments; a Remote Desktop failure is not automatically caused by Windows Update.
As an Amazon Associate I earn from qualifying purchases.
September 2026 RDS instability
Microsoft’s September 8, 2026 security-update notice says that, in some environments, Remote Desktop Services could become unstable. RDP sessions might fail after several minutes, users might be unable to sign in, and servers could stop at “Please wait for the Remote Desktop Configuration.” Microsoft also reported unresponsive MMC, RDS Licensing Diagnoser, File Explorer and Windows Update interfaces on affected systems.
Affected Windows versions
The Windows 11 release-health entry identifies the client-side originating update as KB5124008, released September 8, 2026. Listed client platforms are Windows 11 26H1, 25H2, 24H2 and 23H2; Windows 10 22H2 and 21H2; and Windows 10 Enterprise LTSC 2019 and 2016. Listed server platforms are Windows Server 2025, 2022, 2019, 2016, 2012 R2 and 2012.
#1 Best Overall
- STREAMLIMED AND INTUITIVE UI | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
- JOIN YOUR BUSINESS OR SCHOOL DOMAIN for easy access to network files, servers, and printers.
- OEM IS TO BE INSTALLED ON A NEW PC WITH NO PRIOR VERSION of Windows installed and cannot be transferred to another machine.
- OEM DOES NOT PROVIDE PRODUCT SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.
Microsoft says the issue does not affect Windows 365 or Azure Virtual Desktop. That distinction matters: an on-premises RDS host can be in scope even when a cloud-hosted desktop service is not.
Install the correction
Microsoft released the resolution in updates dated September 14, 2026 and later. The Windows 11 tracker names KB5129195 as the out-of-band resolution. For Windows Server 2025, the September 14 bulletin identifies KB5129235 and specifically lists fixes for RDS connection and sign-in failures, configuration hangs and management tools that stop responding.
- On the affected client or server, open Settings > Windows Update > Update history and record the installed cumulative and OOB KB numbers.
- Compare the operating-system release and installed KB with Microsoft’s affected-platform and update entries.
- Install the September 14 fix offered for that branch, or the newest cumulative update that supersedes it.
- Restart the client and RDS servers during a maintenance window, then test a new session, sign-in and the administrative tools that previously hung.
If the OOB package is not offered, use the latest cumulative update for the same Windows branch rather than mixing packages from another edition or release.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #2
- Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
- Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
- Make the most of your screen space with snap layouts, desktops, and seamless redocking.
- Widgets makes staying up-to-date with the content you love and the news you care about, simple.
- Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
Windows 11 error 0xC000000D and Administrator protection
Microsoft documented a separate problem on September 22, 2026. After preview update KB5124010 or later updates, non-admin users could be unable to connect to remote devices with Administrator protection enabled. The failure displays error 0xC000000D and the text “The token that was passed to the function is invalid.” Microsoft says it primarily affects enterprise-managed Remote Desktop hosts.
Preferred fix: update Windows
Updates released on or after October 13, 2026 resolve this defect. Microsoft lists KB5127646 and KB5127648 among the relevant branch updates. Identify the Windows 11 release in your estate, install its October 13 or later cumulative update, restart as required and retest with a standard (non-admin) account.
Temporary policy mitigation
Use the policy workaround only when deployment of the October fix is not yet possible. Microsoft’s mitigation resets the User Account Control Type Of Admin Approval Mode policy through Intune or Group Policy, temporarily turning off Administrator protection.
Rank #3
- Instantly productive. Simpler, more intuitive UI and effortless navigation. New features like snap layouts help you manage multiple tasks with ease.
- Smarter collaboration. Have effective online meetings. Share content and mute/unmute right from the taskbar (1) Stay focused with intelligent noise cancelling and background blur.(2)
- Reassuringly consistent. Have confidence that your applications will work. Familiar deployment and update tools. Accelerate adoption with expanded deployment policies.
- Powerful security. Safeguard data and access anywhere with hardware-based isolation, encryption, and malware protection built in.
- Apply the change only to devices showing this specific non-admin connection failure.
- Document the affected device scope and the policy change.
- Install the October 13-or-later update, verify Remote Desktop access, then restore the organization’s intended Administrator-protection setting.
Do not use this workaround for the September RDS instability: it addresses a different failure mechanism and does not replace the required OOB or cumulative update.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →What the 2025 RDP regressions looked like
Microsoft’s February 11, 2025 support bulletin records two earlier Windows 11 24H2 regressions. After KB5050094 and later updates, sessions could freeze shortly after connection; disconnecting and reconnecting was often required, and KB5052093 addressed that symptom.
The same bulletin reports a rise in unexpected UDP-based disconnects after the March 2025 security update KB5053598. Connections from Windows 11 24H2 to RDS deployments on Windows Server 2016 or earlier could drop after approximately 65 seconds. KB5053656 addressed that issue. The older-host and timing clues help distinguish this historical regression from the several-minute failures reported in September 2026.
Rank #4
- Video Link to instructions and Free support VIA Amazon
- 24/7 Tech Support!
- key code included
A practical troubleshooting sequence
- Record the exact symptom, including elapsed time to failure, error text and whether the account is an administrator.
- Check the client and server Windows versions, RDS host age and installed KB numbers.
- Exclude Windows 365 and Azure Virtual Desktop from the September 2026 RDS scope, because Microsoft says those services were not affected by that issue.
- For several-minute failures or configuration hangs, deploy KB5129195, KB5129235 where applicable, or the later cumulative update for the affected branch.
- For
0xC000000Dwith Administrator protection, deploy the October 13, 2026-or-later Windows 11 update. Use the policy mitigation only as a temporary bridge. - For a freeze shortly after connection or an approximately 65-second UDP drop to Windows Server 2016-or-earlier RDS, investigate the 2025 fixes instead of treating it as the September 2026 incident.
- Retest both a fresh RDP session and administrative operations such as MMC or RDS Licensing Diagnoser, since the September issue could affect those tools too.
What Microsoft has not established
Microsoft has not published an affected-device count, prevalence percentage or organization total for these advisories. The approximately 65-second figure applies only to the earlier UDP regression described in the 2025 bulletin; it is not a measurement of the September 2026 incident.
The Bottom Line
Match the symptom and installed KB to the correct Microsoft incident. Use the September 14, 2026 OOB or later cumulative update for RDS instability, the October 13, 2026-or-later update for Windows 11 Administrator-protection error 0xC000000D, and the documented policy change only as a temporary mitigation for that second issue.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
