All Products
Search
Document Center

Elastic Compute Service:Use Workbench to connect to a Windows instance over RDP

Last Updated:Jun 24, 2025

Workbench is a web-based remote connection tool that operates within a browser to allow you to connect to an Elastic Compute Service (ECS) instance without additional software. You can connect to an ECS instance by using its public or private IP address to perform O&M operations. This topic describes how to connect to a Windows ECS instance by using Workbench over Remote Desktop Protocol (RDP).

Preparations

Before you connect to a Windows ECS instance by using RDP, complete the following preparations:

  • Check the instance status. You can connect to the ECS instance only when it is in the Running state and the Health Status is Normal.

  • Complete permission-related operations for using Workbench. If permission issues occur, obtain the required Workbench permissions from the Alibaba Cloud account owner or an administrator. For more information, see Workbench service-linked role.

  • Configure security groups of the instance. Add security group rules to a security group to allow the IP addresses related to Workbench to access the instance. The security group rules vary based on the instance's network type. For more information, see Security group settings related to Workbench.

    If no security groups are configured, configure a security group as prompted in the Instance Login dialog box of Workbench.

Procedure

In this example, an ECS instance that runs Windows Server 2022 is used. Port 3389 is the default RDP port. If you want to use a different port as the RDP port to connect to the instance, see the Specify the RDP port section of this topic.
By default, a Workbench session persists for 6 hours. If no operation is performed for more than 6 hours in the session, the session is closed. You must reconnect to the instance by using Workbench.
  1. In the ECS console, find the instance to which you want to connect and open the Instance Login dialog box of Workbench.

    1. Go to ECS console - Instance.

    2. In the top navigation bar, select the region and resource group of the resource that you want to manage. 地域

    3. Click the ID of the instance to which you want to connect. On the Instance Details page, click Connect.

    4. In the Remote connection dialog box, click Sign in now in the Workbench section.

  2. In the Instance Login dialog box, configure the parameters.

    1. Configure basic information about the instance.

      Note

      By default, Workbench uses RDP port 3389 to connect to a Windows instance. For information about how to change the RDP port, see the Specify the RDP port section of this topic.

      Parameter

      Description

      Instance

      The information about the current instance is automatically populated. You can also manually enter the instance ID or name.

      Connection Method

      Select Terminal, which uses the RDP protocol to connect to the instance.

      Connection

      You can connect to the instance by using its public or private IP address.

    2. Configure the Authentication parameter to specify an authentication method.

      For Windows instances, only password-based authentication is supported. Enter a username, such as Administrator, and the password as prompted.

  3. Click Log On and wait for the connection to be established.

    After you connect to the Windows instance, the Windows desktop appears. You can manage your instance based on your business requirements.

More features

Specify the RDP port

To specify the RDP port, click More Options in the Instance Login dialog box, as shown in the following figure.

image

image

Use credential-based authentication

Credential-based authentication allows you to save an instance's username and password as a credential. Then, you can use this authentication method and the credential to connect to the instance without the need to enter the username or password.

Note

You cannot share the credential with other accounts. Only the credential creator can use it to connect to the instance.

  • Save logon credentials

    When logging on to an instance, select the option shown in the figure to the right to save the logon information as a credential. Then, you can use credential-based authentication and the credential for subsequent logons to the instance.

    image

  • Use credentials to log on to an instance

    When specifying a username in the Instance Login dialog box, click Use Credential and select a credential from the Select Credential box as shown in the figure to the right to log on to the instance with the credential.

    image

FAQ

If you cannot connect to a Windows instance, refer to RDP connection issues for troubleshooting.