Connect to a Windows instance by using Remote Desktop or Windows App - Elastic Compute Service

Use the built-in MSTSC client on Windows 10/11 or Windows App on macOS to connect via RDP.

Important

We recommend Workbench for browser-based, password-free logon to your Alibaba Cloud instancesMSTSC and Windows App.

Prerequisites

The instance runs a Windows operating system.
The instance has a static public IP address or an Elastic IP Address (EIP) assigned.

Instance public IP address: In the ECS console - Instances, click the target instance and find the Public IP Address in the Configuration Information section.
Instance logon credentials: Set a password.
Security group configuration: Add an inbound rule allowing your local IP address to access the instance over Remote Desktop Protocol (RDP), with port 3389.

Launch Remote Desktop Connection.

Press Win+R, enter mstsc, and press Enter.
Configure the connection.

In the Computer field, enter the instance's public IP address.
Enter credentials and connect.

Click Connect. Enter the User Name (default: Administrator) and Password, then click OK.

A certificate warning may appear. Click Yes to trust the certificate and continue.
Verify the connection.

The Windows instance desktop appears after a successful connection.

Search for and install the Windows App from the App Store.
Instance public IP address: In the ECS console - Instances, click the target instance and find the Public IP Address in the Configuration Information section.
Instance logon credentials: Set a password.
Security group configuration: Add an inbound rule allowing your local IP address to access the instance over RDP (port 3389).

Start the Windows App.

Click Devices in the left pane, then click > Add PC. The Add PC dialog box appears.
Configure the connection.

In the PC name field, enter the instance's public IP address and click Add .
Initiate the connection.

Click Devices in the left pane. Double-click the newly created PC card.
Enter your credentials.

In the Enter Your Credentials dialog box, enter the User Name (default: Administrator) and Password, then click Continue.

If a certificate warning appears, click Continue to proceed.
Verify the connection.

The Windows instance desktop appears after a successful connection.

Modify the default RDP port

Change the default RDP port 3389 to a high-numbered, non-standard port, such as 33890, to reduce brute-force attack risk.
1. Allow traffic on the new port: Add an inbound rule to allow inbound traffic on the new port.
2. Modify the service port: Log on to the instance and change the port in the registry.
  1. Press Win+R, enter regedit, and press Enter.
  2. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp.
  3. Right-click the PortNumber value and select Modify. Set the base to Decimal and enter the new port number.
  4. Press Win+R, type services.msc, and press Enter. Right-click Remote Desktop Services and select Restart.
3. Connect using the new port: Append the port to the instance's public IP address: <Public IP>:<Port number>.
Authorize only trusted IP addresses to access the instance

Modify the security group rules to allow RDP access (default port: 3389) only from trusted IP addresses.

Add an inbound rule with the following settings:

Action

Protocol

Source

Destination (This Instance)

Allow

Custom TCP

Your local client's public IP address.

Important

Setting the source to 0.0.0.0/0 allows access from any IP address, which poses a security risk.

RDP(3389)

If you changed the RDP port, enter the actual port number.

After I initiate a connection, it times out and fails to connect. What should I do?

The client cannot reach the server. Check the following:
1. Verify that the public IP address is correct.
2. Check that the security group allows traffic on the required port.
3. Confirm the instance is running.
4. Use ECS console - Self-service Troubleshooting to diagnose the issue.
How do I transfer files using MSTSC or the Windows App?
- Transfer files with MSTSC from a Windows computer
- Transfer files with Windows App from a macOS computer