Windows 365 Enterprise known issues
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/SupportArticles-docs · commit 30ad87c · +7 −3 lines · also on GitHub
⋯ 1 unchanged line
22
title: Windows 365 Enterprise and Windows 365 Flex Known issues
33
description: "Learn about known issues for Windows 365 Enterprise and Windows 365 Flex. This information helps you quickly troubleshoot and resolve Cloud PC issues."
44
manager: dcscontentpm
5
−ms.date: 08/21/2026
5
+ms.date: 10/19/2026
66
ms.topic: troubleshooting
77
ms.reviewer: kaushika, japarker, stulimat, scottduf
88
ai-usage: ai-assisted
⋯ 86 unchanged lines
9595
9696
The sign-in prompt affects all users. The elevation prompts and failures affect users who have local administrator rights. By default, users aren't administrators of their Cloud PCs.
9797
98
+If your Cloud PCs are Microsoft Entra hybrid joined and receive the Windows security baselines from the Microsoft Security Compliance Toolkit through Group Policy, Administrator protection is turned on starting with the October 2026 Windows security update, even if you didn't enable it.
99
+
98100
### Solution
99101
100102
If Administrator protection is already enabled on your Cloud PCs, set **User Account Control: Configure type of Admin Approval Mode** to **Legacy Admin Approval Mode** in the policy that's assigned to them, then restart the Cloud PCs. This setting is in the Intune settings catalog under **Local Policies Security Options**.
101103
102
−To prevent Administrator protection from being applied to Cloud PCs:
104
+If your Cloud PCs receive these baselines through Group Policy, set **User Account Control: Configure type of Admin Approval Mode** to **Legacy Admin Approval Mode** in a Group Policy Object that applies to your Cloud PCs and takes precedence over the baseline, then restart them.
103105
106
+To prevent Administrator protection from being applied to Cloud PCs through Intune:
107
+
104108
1. [Create a filter for all Cloud PCs](/windows-365/enterprise/create-filter#create-a-filter-for-all-cloud-pcs).
105109
1. Use the filter to exclude Cloud PCs from any policy that enables Administrator protection.
106110
107
−For more information, see [Administrator protection](/windows/security/application-security/application-control/administrator-protection/).
111
+For more information, see [Administrator protection](/windows/security/application-security/application-control/administrator-protection/) and [Manage Administrator protection within Windows 11 security baseline](/windows/release-health/windows-message-center#5038).
108112
109113
## Single sign-on users see a dialog to allow remote desktop connection during the connection attempt <!--42499792-->
110114
⋯ 266 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/SupportArticles-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 20 Oct 23:52 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.