KB5124006: Cumulative update for Windows 11, version 26H1, September 2026. Remote Desktop failures reported; taskbar moves to four screen edges
Adds taskbar and Start menu customization, while some non-admin Remote Desktop connections can fail on devices with Administrator protection enabled.
Does it affect you? Applies to: Devices running Windows 11, version 26H1, including x64 and Arm64 devices.
What changes
Improvements 22 changes
Taskbar
Start menu
Windows Search
- Search home is simplified, with less visual clutter and quicker access to recent searches.5
- Search results make it clearer whether an item is an app, setting, file, web result, or Store suggestion.6
-
Windows automatically indexes your most-used folders so their files can appear in later searches. You can control this behavior in Settings.7
The control is Settings > Privacy & Security > Search > Automatically find additional relevant locations.
File Explorer
- File Explorer Home launches faster and responds more quickly.8
General design
- Progress indicators have a more consistent appearance during startup, sign-in, restart, shutdown, and update installation.9
Multiple desktops
- Switching between virtual desktops is smoother and more responsive.10
Display and Graphics
Task Manager
- App history information displays more reliably in Task Manager.13
Windows Setup
Network
Input
Accessibility and Localization
For: users of supported languages and regions
- The Intelligent Carveout interface is more accessible and easier to use, with improved translations across supported languages and regions.20
AI components
For: Copilot+ PCs
-
Image Search, Content Extraction, Semantic Analysis, and Settings Model are updated to version 1.2607.840.0.21
AI components apply only to Copilot+ PCs and do not install on other Windows client PCs or Windows Server.
Servicing stack update (SSU)
-
The included servicing stack update improves the reliability of Windows update installation.22
Includes KB5124005, build 28000.3081.
New features 14 changes
Taskbar
-
You can place the taskbar at the bottom, top, left, or right of the screen. Search and the smaller taskbar option are supported only at the top and bottom.23
Change the position under Settings > Personalization > Taskbar > Taskbar behaviors > Taskbar position.
-
A smaller taskbar option reduces the taskbar height and icon size while keeping Start, Search, and the system tray available.24
Set the size to Small under Settings > Personalization > Taskbar > Taskbar behaviors > Taskbar size.
Start menu
Windows Search
-
A new setting lets you choose whether web and Microsoft Store suggestions appear with local search results.27
The setting is under Settings > Privacy & Security > Search.
File Explorer
For: touch-screen devices
- You can scroll through the Recommended files carousel on File Explorer Home using touch.28
Windows Share
For: work or school account users
-
People signed in with a work or school account can discover and install relevant apps from the share window.29
Manage the option under Settings > System > Share > Show suggested apps in share surfaces.
Administrator Protection
-
Administrator protection is beginning to roll out. It lets administrators perform tasks with temporary elevated privileges and is off by default.30
It can be enabled through OMA-URI in Microsoft Intune or through Group Policy. The feature is not classified as a formal security boundary.
App Updates
For: users of participating apps
-
Participating apps can coordinate updates with Windows Update for improved scheduling and a more streamlined update process.31
This support is part of the Windows Update Orchestration Platform (UOP).
Microsoft Store
For: developers and users of supported apps
- Packaged WinUI 3 apps that require elevation can support in-app purchases through Microsoft's integrated commerce platform.32
Windows Autopilot device preparation
For: organizations using Windows Autopilot
-
Device association is generally available to help organizations identify trusted devices before enrollment and apply device-targeted setup.33
It enables device-targeted policies, automatic corporate device enrollment, and additional out-of-box experience (OOBE) customization.
Microsoft Execution Containers
For: developers and organizations using execution containers
-
Process Isolation adds a lightweight boundary that can restrict what workloads such as coding agents can access.34
Policy can restrict access to files, networking, the user interface, and other operating-system capabilities.
Agentic processes
For: developers and organizations using agentic processes
-
Windows adds preview support for marking agentic processes and passing that identifier to their child processes.35
When an agentic process authenticates through Web Account Manager (WAM), the identifier is included in the authentication request. The identifier format may change in future releases.
Cryptography
For: developers and IT administrators
- ML-KEM can now be used on its own for TLS key exchange, in addition to the previously added hybrid groups.36
Fixes 3 changes
Windows Update
- A PC that was manually put to sleep returns to sleep after an update, even if automatic sleep is set to Never.37
Secure Trust
For: domain-joined devices configured to use Machine Identity Isolation in unsupported environments
-
Affected domain-joined devices can keep their secure trust relationship with the domain, allowing users to sign in with valid domain credentials.38
Addresses Machine Identity Isolation issues in unsupported environments by disabling Machine Identity Isolation enforcement while improvements are made to the feature.
File History
For: devices using File History with an external drive or network location
- File History can back up or restore files to an external drive or network location without incorrectly reporting that a working drive needs to be reconnected.39
Removal 1 change
Windows Management Instrumentation Command-line (WMIC)
For: IT administrators and users of WMIC
-
The WMIC utility is no longer included or available as a Feature on Demand in Windows 11, version 26H1. Windows Management Instrumentation (WMI) remains supported.40
WMIC was already removed by default in new installations of Windows 11, version 26H1.
Known issues
-
Remote Desktop connections might fail for non-admin users with error 0xC000000D
After this update or later updates, non-admin users might be unable to connect through Remote Desktop to remote devices with Administrator protection enabled. Connections might fail with error 0xC000000D and the message “The token that was passed to the function is invalid.” This primarily affects enterprise-managed Remote Desktop hosts.41
How to apply the workaround Group Policy / IntuneTemporarily turn off Administrator protection by resetting the User Account Control Type Of Admin Approval Mode policy in Intune or Group Policy.41
-
USB audio devices might fail to start or produce no sound
Some USB Audio Class 1.0 devices might fail to start or produce audio after the September 8, 2026 security update. Symptoms can include Code 10 in Device Manager, no audio output, unresponsive volume controls, or unavailable sound settings.42
Resolution Fixed in KB5132059Install KB5132059 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Devices might experience a black screen or desktop loading issues after sign-in
Some devices, primarily Azure Virtual Desktop hosts using FSLogix, might show a black screen after sign-in or fail to load the desktop automatically. This issue is resolved by KB5127646 and later updates.43
Resolution Fixed in KB5127646Install KB5127646 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-09-22
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5129194, KB5124012, KB5120996, KB5121000
- Replaced by
- KB5127646
| Version | Build | Channel |
|---|---|---|
| 26H1 | 28000.3086 | General availability |
| 26H1 | 28000.3079 | Release Preview Channel |
| 26H1 | 28000.3086 | Release Preview Channel |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
8,866 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Settings | 138 |
| Graphics and display | 56 |
| Remote Desktop | 56 |
| Bluetooth | 53 |
| Audio | 47 |
| Networking | 46 |
| .NET networking | 40 |
| Printing | 39 |
| Security and sign-in | 38 |
| File Explorer and shell | 30 |
| Windows Update | 30 |
| Hyper-V and virtualization | 25 |
Verified in package: changed files confirm Taskbar, Start menu, Windows Search, Display and Graphics, Input, AI components, Servicing stack update (SSU), Windows Share, App Updates, Microsoft Execution Containers, Windows Update.
Page history
-
Known issue resolved: Remote Desktop connections might fail for non-admin users with error 0xC000000D (KB5127653)
Sources
Cited passages from Microsoft's official notes (43)
-
1.
The Taskbar behaviors section of the Taskbar settings page is now expanded by default for improved discoverability.
support.microsoft.com -
2.
This update improves the reliability of loading the system tray area of the taskbar for non-touch PCs.
support.microsoft.com -
3.
The "Recommended" section is renamed "Recent" in the Start menu and Settings page
support.microsoft.com -
4.
The Start menu settings page is now redesigned with section-level toggles to independently show or hide Pinned, Recommended, and All.
support.microsoft.com -
5.
Search home has been simplified to reduce visual clutter and make it easier to get back to recent searches quickly.
support.microsoft.com -
6.
Search does a better job showing where a result comes from, app, setting, file, web result, or Store suggestion
support.microsoft.com -
7.
Windows now automatically indexes your most used folders to make those files appear in subsequent search results.
support.microsoft.com -
8.
Launching File Explorer Home is now faster and more responsive.
support.microsoft.com -
9.
This update introduces updated progress indicators across Windows, providing a more consistent and modern experience during startup, sign-in, restart, shutdown, and update installation.
support.microsoft.com -
10.
Switching between virtual desktops is now smoother and more responsive.
support.microsoft.com -
11.
This update improves the reliability of navigating to and interacting with Settings > System > Display.
support.microsoft.com -
12.
This update improves the persistence of previous brightness settings once the energy saver turns off.
support.microsoft.com -
13.
This update improves the reliability of displaying app history information in Task Manager.
support.microsoft.com -
14.
This update streamlines the experience for selecting a secondary keyboard during Windows setup, making it easier to skip when it isn't needed.
support.microsoft.com -
15.
This update improves the Get Started app with new App install, Site pinning, and Theme pages to help you personalize your device and discover new features.
support.microsoft.com -
16.
This update improves resiliency and recovery from potential VPN process-related background issues that can cause processes to stop responding.
support.microsoft.com -
17.
This update improves the output of the
support.microsoft.comnetsh wlan show wlanreportcommand for Japanese users. -
18.
This update improves the reliability of typing with the Japanese IME by reducing potential hangs.
support.microsoft.com -
19.
This update improves the persistence of voice typing settings for automatic punctuation and launcher.
support.microsoft.com -
20.
This update improves the accessibility and user experience of the Intelligent Carveout interface and provides improved translations for users across supported languages and regions.
support.microsoft.com -
21.
This release updates the following AI components to version 1.2607.840.0: Image Search, Content Extraction, Semantic Analysis, and Settings Model.
support.microsoft.com -
22.
Includes KB5124005 (Build 28000.3081), which improves the reliability of the Windows update installation process.
support.microsoft.com -
23.
You can now choose whether the taskbar appears at the bottom, top, left, or right side of your screen.
support.microsoft.com -
24.
A smaller taskbar option is now available to help maximize screen space on smaller devices.
support.microsoft.com -
25.
You can choose between a small or large Start menu, in addition to "Automatic (default)" that's available today.
support.microsoft.com -
26.
You can now hide your name and profile picture in Start
support.microsoft.com -
27.
A new setting in Settings > Privacy & Security > Search lets you choose whether web and Microsoft Store suggestions appear alongside local results.
support.microsoft.com -
28.
The Recommended section on Home now supports touch scrolling, making it easier to browse files in the carousel.
support.microsoft.com -
29.
This update adds the ability for users signed in with a work or school account to discover and install relevant apps directly from the share window.
support.microsoft.com -
30.
This feature is turned off by default and can be enabled using OMA-URI in Microsoft Intune or through Group Policy.
support.microsoft.com -
31.
Supported apps can benefit from improved scheduling and a more streamlined update experience.
support.microsoft.com -
32.
This update provides support for in-app purchases in packaged WinUI 3 apps that require elevation
support.microsoft.com -
33.
Device association for Windows Autopilot device preparation is now generally available.
support.microsoft.com -
34.
This update introduces Process Isolation for Microsoft Execution Containers (MXC), a fast, lightweight boundary for responsive workloads such as coding agents and model-generated code.
support.microsoft.com -
35.
This update introduces preview platform support for tagging agentic processes.
support.microsoft.com -
36.
Post-Quantum Cryptography algorithm ML-KEM can now be used as a standalone algorithm for TLS key exchange
support.microsoft.com -
37.
This update improves restart behavior so PCs that were manually put to sleep return to sleep after completing an update, even when automatic sleep is set to Never.
support.microsoft.com -
38.
This issue affected devices configured to use Machine Identity Isolation in unsupported environments.
support.microsoft.com -
39.
This update addresses an issue where File History might fail to back up or restore files to an external drive or network location.
support.microsoft.com -
40.
WMIC is already removed by default in new installations of Windows 11, version 26H1, and will no longer be available as a Feature on Demand (FoD).
support.microsoft.com -
41.
IT administrators can mitigate this issue on devices affected by the Remote Desktop connection failure by using their existing policy management method to temporarily turn off Administrator protection.
learn.microsoft.com -
42.
After installing the September 8, 2026, Windows security update, some USB Audio Class 1.0 devices might fail to start or produce audio.
support.microsoft.com -
43.
This issue was resolved by Windows updates released October 13, 2026 (KB5127646), and updates released after that date.
learn.microsoft.com
Checked automatically: 8 of 8 checks passed, 43 quoted passages · compared with Microsoft's page on Nov 14, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake