Microsoft confirms that the Administrator protection feature can block non-admin Remote Desktop connections after recent Windows updates.
Microsoft has confirmed that recent Windows updates can cause Remote Desktop connection failures for non-admin users. The issue occurs when the Administrator protection security feature is enabled on the device being connected to.
Administrator protection is a security feature that limits elevated access. According to Microsoft, the problem arises specifically for non-admin users after installing the updates. The company did not provide a workaround or additional details in the announcement.
Researchers say attackers used a stolen vendor credential to reach dozens of Microsoft 365 tenants, and they warn that disabling the app alone may not be enough.
The newly discovered npm package extends a long-running MALFEX supply chain campaign that targets Windows developers with stealthy shellcode loaders.
AI is scaling credential theft, so identity security must verify both user and device, not just successful logins.
Sysdig findings show a skilled human operator moved from initial access to an SSH bastion in eight seconds, underscoring that speed is no longer AI's exclusive advantage.