All Products
Search
Document Center

Elastic Compute Service:Connect to a Windows instance using Workbench

Last Updated:Dec 10, 2025

Workbench is a browser-based remote connection tool provided by Alibaba Cloud. You can use it to connect to a Windows Elastic Compute Service (ECS) instance directly over a private network.

Prerequisites

  • Instance status: The instance must be in the Running state and the Health Status must be Normal.

  • RAM permissions: A RAM user must have the required permissions to use Workbench.

Procedure

  1. Log on to the ECS console - Instances. At the top of the page, select a resource group and region.

  2. Find the target instance, click Connect, and select Workbench and click Sign in now.

  3. On the Workbench Instance Login page, complete the following configuration, and then click Log In.

    Configuration Item

    Description

    Instance

    Workbench automatically populates the information for the current instance.

    Connection Method

    Select Terminal. This method uses the Remote Desktop Protocol (RDP) to connect to the instance.

    Authentication

    Password-based.

    Username

    The default username for a Windows instance is Administrator

    .

    Password

    If you have forgotten your password or have not set one, you must reset it.

    To avoid entering your username and password every time you log on, you can remember your password.

    RDP Port (Optional)

    The default RDP port is 3389. You can change it on the Instance Login page under More Options > Port.

    After you click Log In, the system may prompt you to add a security group rule to allow access from Workbench IP address ranges to the instance's RDP port (default: 3389). Click One-click Add to quickly configure the security group. The console displays the specific security group rule that is required.
Important

A Workbench remote connection session lasts for a maximum of 6 hours. If there is no activity for more than 6 hours, Workbench automatically terminates the connection, and you must reconnect.

FAQ

How do I save a logon credential?

To avoid entering your username and password every time you log on, save them as a credential.

Credentials are user-specific and cannot be shared.
  • Save a logon credential

    When logging on to an instance, select Save the logon credential. After a successful logon, Workbench saves the credential.image

  • Use a logon credential

    When logging on to an instance, you can use a saved credential by selecting the Use Credential option when setting the username.image

How does Workbench connect to an instance over a private network?

When Workbench connects to an instance by using its private IP address, it automatically creates reverse access rules within the Virtual Private Cloud (VPC) where the instance resides to establish a secure, bidirectional communication channel. You can view or manage these rules under image > Private Links.

What is the default username for a Windows instance?

The default username for a Windows instance is Administrator.

What is the default password for an instance?

Instances do not have a default password. To set a password, reset the password.

Troubleshoot remote connection failures

If you cannot connect to your instance, first use the self-service diagnostic tool to troubleshoot the issue. For manual troubleshooting steps, see Troubleshoot connection errors to a Windows instance.

  1. Click to go to self-service troubleshooting page, and switch to the target region.

  2. Under Instance Cannot Connect, click Intiate Diagnosis. Follow the on-screen instructions to select the affected instance and click Intiate Diagnosis.

  3. After the diagnosis is complete, follow the prompts to resolve the issue.