Microsoft recently updated its release health dashboard to confirm an emerging remote connectivity defect. Specifically, Windows 11 devices installing cumulative update KB5124010 or subsequent releases may reject Remote Desktop connections from non-administrator users. Furthermore, affected systems immediately terminate the handshake with error code 0xC000000D. Consequently, the client interface reports that the incoming authentication token is invalid. Enterprise Environments Face Primary Impact…

Windows 11 users may soon get another layer of protection against privilege escalation, following Microsoft's recent moves to return Administrator Protection to the OS.

Microsoft released KB5120998 for Windows 11 25H2 and 24H2 as a preview cumulative update with 35 changes, including Start menu, taskbar, and Windows Search improvements. It also begins rolling out administrator protection and adds new taskbar and Start menu customization options, while warning that some devices may restart an extra time during upcoming update installations. #KB5120998 #Windows11 #AdministratorProtection

Security, Compliance, and Identity Blog: Early in 2024, the MORSE team investigated the new Administrator protection (AP) feature in Windows. Believing context is important to understand the decisions...

This week is all about the new functionality on Windows devices to help protect administrator users. That new functionality is Administrator protection. Administrator protection is aimed at protect…

Previously, in part one, we outlined the history of the multi-user model in Windows, how Microsoft introduced features to secure it, and in what ways we got...