Skip to main content
A Windows account lets people open a remote desktop (RDP) session on one Windows server without seeing the account’s password. They connect with an RDP client in the browser or with their own RDP client through the Infisical CLI, and Infisical records each session. To sign in to several servers with one Active Directory account, use a Windows AD account instead.
Windows accounts are available under Infisical’s Enterprise plan.

​
Prerequisites

  • The Admin role on the folder you’ll add the account to
  • A Gateway that can reach the server on its RDP port
  • A Windows template that stores recordings in your own S3 bucket (the default Windows template stores them in Infisical’s database, so a Product Admin must change it or create another template)

​
Create an account

1
Go to Privileged Access Management > Accounts and select Add Account.
2
Select the Folder to add the account to and a Windows Account Template, then select Next.
3
Enter a Name for the account and the server’s connection details:Infisical uses WinRM for credential rotation, credential health checks, and dependency detection, not for RDP sessions.
4
Enter the Username and Password of the local Windows account.
Enter the username on its own, such as svc-backup, without a .\ or computer name in front of it.
5
Select Create.

​
Connect

People can open a remote desktop in the browser or connect through the CLI. To learn how to launch a session, see Connect to an account. The CLI starts a local proxy and prints its port:
Point your RDP client at localhost on that port, for example:
Press Ctrl+C to end the session.