> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows RDP Web Access

> Connect to Windows servers via RDP directly from your browser.

Infisical PAM supports two ways to connect to a Windows server via RDP:

* **Browser**: Connect directly from the Infisical dashboard with a full graphical desktop session. No RDP client installation required.
* **Native RDP Client**: Use the Infisical CLI to start a local RDP proxy that launches your native RDP client (mstsc, Microsoft Remote Desktop, or FreeRDP). Run `infisical pam rdp access` to start a session.

In both cases, credentials are injected automatically from the PAM account configuration. You never need to enter or see them.

## Connecting via Browser

<Steps>
  <Step title="Navigate to Account">
    Go to the **Resources** tab in your PAM project, open the Windows Server resource, and find the account you want to access. Click the **Connect** button next to the account.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/pam/product-reference/web-access/rdp-account-connect-button.png" alt="Account Connect Button" />

    Alternatively, if you are on the account page, click the **Access** button.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/pam/product-reference/web-access/rdp-account-page-access-button.png" alt="Account Page Access Button" />
  </Step>

  <Step title="Connect in Browser">
    In the connect modal, click **Connect in Browser**. A new tab opens and begins establishing the RDP session. A loading indicator is displayed while Infisical sets up the secure tunnel through the Gateway to your Windows server.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/pam/product-reference/web-access/rdp-connect-in-browser.png" alt="Connect in Browser" />
  </Step>

  <Step title="Interact with the Desktop">
    Once connected, you have a full graphical desktop session.

    <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/pam/product-reference/web-access/rdp-connected-desktop.png" alt="Connected Desktop" />
  </Step>

  <Step title="End Session">
    Click the **Disconnect** button in the status bar at the bottom of the screen. You can reconnect from the same page using the **Reconnect** button.
  </Step>
</Steps>

## Session Recording

RDP sessions are recorded by the Gateway as a full video capture of the remote desktop, including keyboard input, mouse events, and screen frames with timestamps. Administrators can play back the recording from the **Sessions** page in the PAM project to review exactly what the user saw and did.

See [Session Recording](/documentation/platform/pam/product-reference/session-recording) for details on how recordings are captured, uploaded, and stored.

RDP session recordings require external S3 storage to be configured. See [External Storage](/documentation/platform/pam/product-reference/external-storage) for setup instructions.

## Active Directory

Windows Server resources can be associated with an Active Directory domain. When a server is domain-joined, accounts from the AD domain can be used to access the server through RDP web access. The Gateway injects the domain credentials (including the domain name) into the RDP connection automatically.

See [Windows Server - Domain Join](/documentation/platform/pam/getting-started/resources/windows-server#domain-join) and [Active Directory](/documentation/platform/pam/getting-started/resources/active-directory) for setup instructions.

## FAQ

<AccordionGroup>
  <Accordion title="What RDP features are supported in the browser?">
    Keyboard input (including shortcuts like Ctrl+Alt+Del and Alt+Tab), mouse interaction, and screen display with automatic scaling are supported. Clipboard sharing, file/drive redirection, audio redirection, and printer redirection are not currently supported.
  </Accordion>

  <Accordion title="What happens if my connection drops?">
    If your browser tab closes or the network connection drops, the session ends. Click **Reconnect** to start a new session. Sessions cannot be resumed after a disconnect, so any unsaved work on the remote desktop will be lost.
  </Accordion>

  <Accordion title="Does the session stay active if I switch to another tab?">
    The session continues running in the background, but it will automatically close after 10 minutes of inactivity. Switch back to the tab periodically to keep the session alive.
  </Accordion>
</AccordionGroup>