> ## Documentation Index
> Fetch the complete documentation index at: https://docs.duvo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Remote Desktop

The Windows Remote Desktop connection lets your agents control Windows machines in your own environment over RDP. Unlike Computer Use (which provides a Duvo-managed Windows sandbox), this connection targets your existing Windows servers, cloud VMs, or terminal servers, giving agents access to your internal systems, installed software, and network resources.

<Note>
  **Beta** — This feature is currently in beta and may change.
</Note>

## Setup

<Steps>
  <Step title="Confirm prerequisites" icon="circle-check">
    <Check>A Windows machine accessible via RDP (Remote Desktop Protocol).</Check>
    <Check>RDP enabled on the target machine (port 3389 by default).</Check>
    <Check>A Windows user account with permissions to log in via RDP.</Check>
    <Check>Network connectivity between Duvo and your Windows machine. For private networks, contact your Duvo account team to set up VPN access.</Check>
  </Step>

  <Step title="Grant the required permissions" icon="key">
    The Windows user account used for the connection needs:

    * **Remote Desktop Users** group membership (or equivalent)
    * Permissions for the applications and files the agent will access
    * **PowerShell execution policy** that permits the automation scripts to run — prefer a least-privilege scope (for example, `-Scope Process` or `-Scope CurrentUser`, and signed scripts) rather than relaxing the policy machine-wide
    * **Win+R (Run dialog) enabled** in Group Policy (required for UI automation)

    <Warning>
      Scope the connecting account to only what the agent needs. Prefer a least-privilege PowerShell execution policy (for example, `-Scope Process` or `-Scope CurrentUser`, with signed scripts) rather than relaxing the policy machine-wide.
    </Warning>
  </Step>

  <Step title="Add the connection in Duvo" icon="plug">
    On the [Connections page](https://app.duvo.ai/integrations), open Windows Remote Desktop and fill in these fields. Secrets are encrypted using Google Cloud KMS.

    <ParamField body="Integration Name" type="string" required>
      A custom name for this connection to help you identify it later.
    </ParamField>

    <ParamField body="Host" type="string" required>
      RDP host address — the IP address or hostname of the Windows machine.
    </ParamField>

    <ParamField body="Username" type="string" required>
      Windows username used for RDP authentication.
    </ParamField>

    <ParamField body="Password" type="string" required>
      Windows password used for RDP authentication.
    </ParamField>

    <ParamField body="Port" type="number">
      RDP port — leave blank to use the default (3389).
    </ParamField>

    <ParamField body="Domain" type="string">
      Windows domain, if the machine is domain-joined.
    </ParamField>

    <ParamField body="Jump Host" type="string">
      Hostname or IP of a bastion/jump server for two-hop connections.
    </ParamField>

    <ParamField body="Jump Port" type="number">
      SSH port on the jump host (defaults to 22).
    </ParamField>

    <ParamField body="Jump Username" type="string">
      User account on the jump host (required when a jump host is set).
    </ParamField>

    <ParamField body="Jump Password" type="string">
      Password for the jump host (provide either password or private key).
    </ParamField>

    <ParamField body="Jump Private Key" type="PEM">
      PEM-encoded private key for the jump host.
    </ParamField>

    <ParamField body="Jump Private Key Passphrase" type="string">
      Passphrase to decrypt the jump host private key.
    </ParamField>
  </Step>
</Steps>

## How It Works

Duvo connects to your Windows machine using the standard Remote Desktop Protocol (RDP) over port 3389 by default (configurable). The connection is secured with TLS encryption and CredSSP authentication. For machines on private networks, Duvo routes traffic through a site-to-site VPN tunnel to your infrastructure.

RDP is a bidirectional protocol — it transmits keyboard and mouse input to the remote machine while streaming the desktop display back. From the Windows perspective, input from Duvo looks identical to input from a local user, which is why desktop applications work seamlessly. The agent can launch programs, click through menus, and type into fields exactly as a person would at that machine.

## Capabilities

* **Control Windows applications** — Click, type, and navigate Windows applications installed on the target machine, subject to the connected user's permissions.
* **UI Automation** — Interact with UI elements by name and type, not just pixel coordinates, making automation more reliable for thick-client applications.
* **Sign in with stored Logins** — Use saved logins from [Logins and Secrets](/user-guide/resources/my-logins) to sign in to applications on the remote machine, including one-time 2FA codes, without exposing passwords to the agent.
* **Run PowerShell scripts** — Execute PowerShell commands and scripts directly on the remote machine.
* **Clipboard access** — Read from and write to the Windows clipboard for data transfer between applications.
* **Access network resources** — Reach internal file shares, databases, and services available from the target machine.
* **Live desktop view** — Watch the remote desktop in real-time as your agent works.

## Key Benefits

* **Your environment, your data** — Work directly on your existing Windows infrastructure, with access to installed software and internal resources based on the connected user's permissions.
* **Thick-client automation** — Automate legacy Windows applications, custom business software, and systems that only run on Windows.
* **UI-aware interaction** — The UI Automation feature finds and interacts with UI elements by their properties, not just screen positions, making automations more robust.
* **Enterprise integration** — Connect to Windows machines behind your firewall, on your VPN, or in any cloud or on-premises environment.
* **Full visibility** — Watch the session live and review screenshots of every action for compliance and debugging.

## Works Well With

<CardGroup cols={2}>
  <Card title="Snowflake" icon="https://mintcdn.com/duvo-d8027998/O3tlM6eCuFk2uJpN/images/connections/snowflake.svg?fit=max&auto=format&n=O3tlM6eCuFk2uJpN&q=85&s=42fbf1853c296d1876c3b1fc21a8779e" href="/user-guide/connections/available-connections/snowflake" width="16" height="16" data-path="images/connections/snowflake.svg">
    Pull data from your warehouse or ERP, then enter it into a Windows-only application.
  </Card>

  <Card title="Gmail" icon="https://mintcdn.com/duvo-d8027998/O3tlM6eCuFk2uJpN/images/connections/gmail.svg?fit=max&auto=format&n=O3tlM6eCuFk2uJpN&q=85&s=ad4e229283f3fe2f26c0f96a49f28e13" href="/user-guide/connections/available-connections/gmail" width="88" height="66" data-path="images/connections/gmail.svg">
    Process files in desktop applications and send results by email.
  </Card>
</CardGroup>

## Limitations

* Elevated (administrator) processes cannot be automated if the RDP user runs at a lower privilege level.