Microsoft "Administrator protection" (Administrator himoyasi) xavfsizlik funksiyasi yoqilganida, oddiy foydalanuvchilarning Remote Desktop orqali qurilmalarga ulanishiga to'sqinlik qiladigan ma'lum muammoni hal qildi.
Administrator himoyasi yoqilganda, u standart foydalanuvchilardan Windows Hello (PIN yoki biometrik) orqali autentifikatsiya qilishni so'raydi, agar ular Windows Registry'ni o'zgartirishga yoki yangi ilovalarni o'rnatishga harakat qilsalar.
Bu funksiya 2025-yil oktyabr oyida tarqatila boshlandi va hozirda Windows xavfsizlik bazaviy sozlamalaridan foydalanadigan tashkilotlarda 2026-yil oktyabr oyidagi Windows xavfsizlik yangilanishi o'rnatilgandan so'ng sukut bo'yicha yoqilgan.
Microsoft 13-oktyabrda tan oldiki, KB5124010 2026-yil sentyabr oyidagi xavfsizlik bilan bog'liq bo'lmagan oldindan ko'rish yangilanishi (yoki o'shandan keyin chiqarilgan Windows yangilanishlari) Windows 11 24H2 va undan keyingi versiyalarni ishlatayotgan tizimlarda o'rnatilgandan so'ng Remote Desktop ulanishlari 0xC000000D xatosi bilan muvaffaqiyatsiz bo'lishi mumkin.
"Bu muammo asosan Administrator himoyasi yoqilgan holda Remote Desktop xostlari sifatida ishlatiladigan korporativ boshqariladigan masofaviy qurilmalarga ta'sir qiladi, funksiya qanday yoqilganidan qat'i nazar," — deb aytdi u.
Remote Desktop ulanish nosozliklari endi tuzatildi
Chorshanba kuni Microsoft bu muammo joriy oydagi KB5127936 oldindan ko'rish yangilanishini o'rnatgan foydalanuvchilar uchun tuzatilganini tasdiqladi.
"Bu muammo 2026-yil 28-oktyabrda (KB5127936) va undan keyin chiqarilgan Windows yangilanishlari orqali hal qilindi," — deb ta'kidladi u. "Biz sizga qurilmangiz uchun eng so'nggi xavfsizlik yangilanishini o'rnatishni tavsiya qilamiz, chunki u muhim yaxshilanishlar va muammolarni hal qilishni o'z ichiga oladi, shu jumladan bu ham."
Microsoft shuningdek, ushbu oldindan ko'rish yangilanishini o'rnatishni istamaydigan va keyingi oyning Patch Tuesday (Seshanba yamog'i) to'plam yangilanishlarini kutishni afzal ko'radigan foydalanuvchilar uchun vaqtinchalik yechim ham taqdim etadi, bu IT ma'murlaridan Microsoft Intune yoki Group Policy (Guruh siyosati) orqali "User Account Control Type Of Admin Approval Mode" (Foydalanuvchi hisobini nazorat qilish Administrator tasdiqlash rejimi turi) siyosatini qayta o'rnatish orqali administrator himoyasi funksiyasini o'chirishni talab qiladi.
Microsoft 2025-yil mart oyida 2025-yil yanvaridan beri chiqarilgan Windows yangilanishlari o'rnatilgandan so'ng Remote Desktop va RDS ulanish nosozliklariga sabab bo'lgan shunga o'xshash muammoni tuzatgan edi.
Shuningdek, u o'tgan oyda 2026-yil sentyabr oyidagi xavfsizlik yangilanishlari tufayli yuzaga kelgan Remote Desktop Services (Masofaviy ish stoli xizmatlari) nosozliklarini tuzatish uchun favqulodda Windows yangilanishlarini ham chiqardi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgandan so'ng, ularning harakatlarining atigi 37 foizi bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanayotgan bo'lsa, oldini olish keskin pasayadi.
Blue Report 2026 (Ko'k hisobot 2026) mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha mudofaa usullarini texnika bo'yicha o'lchaydi.
Hisobotni oling
Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the "Administrator protection" security feature is enabled.
When Administrator protection is enabled, it prompts standard users to authenticate with Windows Hello (PIN or biometric) when they try to change the Windows Registry or install new apps.
This feature began rolling out in October 2025 and is now enabled by default in organizations using Windows security baselines after installing the October 2026 Windows security update.
Microsoft acknowledged on October 13 that Remote Desktop connections may fail with error 0xC000000D after installing the KB5124010 September 2026 non-security preview update (or Windows updates released since then) on systems running Windows 11 24H2 and later.
"This issue primarily affects enterprise-managed remote devices used as Remote Desktop hosts with Administrator protection enabled, regardless of how the feature was enabled," it said.
Remote Desktop connection failures now fixed
On Wednesday, Microsoft confirmed that this issue is fixed for users who installed this month's KB5127936 preview update.
"This issue was resolved by Windows updates released October 28, 2026 (KB5127936), and later," it noted. "We recommend you install the latest security update for your device as it contains important improvements and issue resolutions, including this one."
Microsoft also provides a temporary workaround for users who don't want to install this preview update and would rather wait for next month's Patch Tuesday cumulative updates, which requires IT administrators to disable the admin protection feature by resetting the "User Account Control Type Of Admin Approval Mode" policy via Microsoft Intune or Group Policy.
Microsoft fixed a similar issue in March 2025 that was causing Remote Desktop and RDS connection failures after installing Windows updates released since January 2025.
It also released emergency out-of-band Windows updates last month to fix Remote Desktop Services failures caused by the September 2026 security updates.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report
