Workbench is a browser-based remote connection tool provided by Alibaba Cloud. You can use it to connect to a Windows Elastic Compute Service (ECS) instance directly over a private network.
Prerequisites
Instance status: The instance must be in the Running state and the Health Status must be Normal.
RAM permissions: A RAM user must have the required permissions to use Workbench.
Procedure
Log on to the ECS console - Instances. At the top of the page, select a resource group and region.
Find the target instance, click Connect, and select Workbench and click Sign in now.
On the Workbench Instance Login page, complete the following configuration, and then click Log In.
Configuration Item
Description
Instance
Workbench automatically populates the information for the current instance.
Connection Method
Select Terminal. This method uses the Remote Desktop Protocol (RDP) to connect to the instance.
Authentication
Password-based.
Username
The default username for a Windows instance is
Administrator.
Password
If you have forgotten your password or have not set one, you must reset it.
To avoid entering your username and password every time you log on, you can remember your password.
RDP Port (Optional)
The default RDP port is 3389. You can change it on the Instance Login page under .
After you click Log In, the system may prompt you to add a security group rule to allow access from Workbench IP address ranges to the instance's RDP port (default: 3389). Click One-click Add to quickly configure the security group. The console displays the specific security group rule that is required.
A Workbench remote connection session lasts for a maximum of 6 hours. If there is no activity for more than 6 hours, Workbench automatically terminates the connection, and you must reconnect.
FAQ
How do I save a logon credential?
To avoid entering your username and password every time you log on, save them as a credential.
Credentials are user-specific and cannot be shared.
Save a logon credential
When logging on to an instance, select Save the logon credential. After a successful logon, Workbench saves the credential.

Use a logon credential
When logging on to an instance, you can use a saved credential by selecting the Use Credential option when setting the username.

How does Workbench connect to an instance over a private network?
When Workbench connects to an instance by using its private IP address, it automatically creates reverse access rules within the Virtual Private Cloud (VPC) where the instance resides to establish a secure, bidirectional communication channel. You can view or manage these rules under .
What is the default username for a Windows instance?
The default username for a Windows instance is Administrator.
What is the default password for an instance?
Instances do not have a default password. To set a password, reset the password.
Troubleshoot remote connection failures
If you cannot connect to your instance, first use the self-service diagnostic tool to troubleshoot the issue. For manual troubleshooting steps, see Troubleshoot connection errors to a Windows instance.
Click to go to self-service troubleshooting page, and switch to the target region.
Under Instance Cannot Connect, click Intiate Diagnosis. Follow the on-screen instructions to select the affected instance and click Intiate Diagnosis.
After the diagnosis is complete, follow the prompts to resolve the issue.
> Private Links