Windows 11 · 26H1 · Release · Out-of-band update

Preview Update for Windows 11 (28000.3237)

Windows 11 26H1: For specific new hardware; not a feature update for existing PCs

Microsoft release information · Verified Oct 26, 2026

AI summary

Windows 11 version 26H1 (Release), build 28000.3237, is the October 26, 2026 non-security OOB update KB5134134; it adds an updated trusted-root certificate payload for devices that can’t receive automatic certificate-list updates. A known issue may prevent non-admin users from connecting via Remote Desktop to devices with Administrator protection enabled, returning error 0xC000000D. (support.microsoft.com)

Generated from the package's release notes and forum coverage. Verify against Microsoft's release-health page before acting on it.

Microsoft's known issues — KB5134134

  • Issue Known issue After installing the September 2026 non-security preview update KB5124010 , or later updates, non-admin users might be unable to establish Remote Desktop connections to remote devices that have Administrator protection enabled. Attempts to connect might fail with error 0xC000000D and display the message, “The token that was passed to the function is invalid.” This issue primarily affects enterprise-managed remote devices used as Remote Desktop hosts with Administrator protection enabled, regardless of how the feature was enabled . Note: If your organization uses Windows security baselines , published through the Microsoft Security Compliance Toolkit , Administrator protection is enabled by d Workaround: IT administrators can mitigate this issue on devices affected by the Remote Desktop connection failure by using their existing policy management method to temporarily turn off Administrator protection. Reset the User Account Control Type Of Admin Approval Mode policy in Microsoft Intune or Group Policy. For more information, see Administrator protection on Windows 11 . Next steps: Microsoft is working to address this issue in a future Windows update and will provide more information when it is available. ​​​​​​​​​ Symptoms After installing the September 8, 2026, Windows security update (KB5124012), some USB Audio Class 1.0 devices might fail to start or produce audio. Affected devices might

Microsoft's release notes for KB5134134 ›

Known issues — reported on the forum

No problems reported on the forum for this build yet. Threads that name 28000.3237 or KB5134134 and describe a fault appear here automatically.

In the news

Discussed on the forum

No member thread names 28000.3237 yet.

Search the forum for 28000.3237 Ask about this build