Redmond, Washington, Jan 18, 2026, 14:26 PST
- Microsoft issued out-of-band Windows updates on Jan. 17 after reports of Remote Desktop sign-in failures and a shutdown/hibernation restart bug
- The Remote Desktop issue spans multiple Windows client and server versions, including Windows 10 ESU builds
- The shutdown problem was limited to Windows 11 23H2 devices with Secure Launch enabled
Microsoft released emergency, out-of-band Windows updates late this week to address problems that left some users unable to sign in over Remote Desktop and, on a narrower set of machines, prevented normal shutdown and hibernation.
The fixes land days after Microsoft’s regular monthly security release on Jan. 13, a schedule many organisations follow closely to patch vulnerabilities. When those updates break remote access or power controls, it can stall IT support work and disrupt employees who rely on offsite logins.
Microsoft said it identified “connection and authentication failures in remote connection applications” after the January security updates, and pushed the out-of-band packages — patches shipped outside the normal monthly cycle — on Jan. 17.
For Windows 11 versions 25H2 and 24H2, Microsoft’s KB5077744 out-of-band update fixes Remote Desktop sign-in failures seen after the January security update KB5074109, it said. The company noted the issue could hit authentication steps for different Remote Desktop tools, including the Windows App. Microsoft
A separate out-of-band package for Windows 11 23H2, KB5077797, also addresses Remote Desktop sign-in problems and a power-management glitch. Microsoft said some devices with Secure Launch enabled would restart instead of shutting down or entering hibernation. Microsoft
Secure Launch — formally System Guard Secure Launch — is a security configuration aimed at tightening startup protection using virtualization-based safeguards. It is more common in managed enterprise setups than on consumer PCs. Microsoft
Microsoft said the out-of-band fixes are available through the Microsoft Update Catalog and pointed administrators to separate knowledge base articles depending on Windows version. The company also listed Windows 10 22H2 Extended Security Updates (ESU) builds — a paid program that keeps older releases patched past their usual support window — and Windows Server releases among the affected platforms. Microsoft
BleepingComputer reported that the Remote Desktop problem can show up as “credential prompt failures” and can break logins via the Windows App to Azure Virtual Desktop and Windows 365 cloud PCs. Microsoft said the emergency updates are meant for systems that hit the bugs, and others can wait for the standard update cadence to absorb the fixes. Bleepingcomputer
But the rapid patch cycle leaves IT teams with a familiar trade-off. Out-of-band updates can be harder to test and roll out at scale, and some organisations may delay — even if that means living with Remote Desktop errors or machines that reboot when asked to shut down.
The Verge, which first highlighted the shutdown issue, said the problem was confined to Enterprise and Internet of Things (IoT) editions of Windows 11 23H2 and that an emergency fix was already available. Microsoft has not said how many devices were affected. Theverge
Microsoft’s out-of-band packages are cumulative, meaning they bundle earlier security fixes along with the new repairs. The company also published installation guidance for administrators pulling standalone packages from the catalog.
