# Connect to a Windows server over RDP

> Open a remote desktop session to a Windows server from your browser. Your browser signs in to the server directly, so ITVA never stores your password.

Section: Connect  
Source: https://www.itva.com/docs/connect/connect-to-a-windows-server-over-rdp  
Last updated: 2026-11-03

When you finish, you will have a remote desktop session to a Windows server open in your browser.

## Before you begin

- Your role has the **Manage** permission for **Connect** and **Devices**.
- The server has a primary or secondary probe. The probe runs version 5.0.2 or later.
- The probe can reach the server on its RDP port. The default is 3389.
- You have a Windows account that can sign in to the server over RDP.
- If the server requires MFA, MFA is set up on your ITVA account.

## Open an RDP session

1. Open the server's device page and select **Connect**. You can also open the **Connect** page and select the server.
2. Make sure that **Protocol** is **RDP**. ITVA selects it for Windows Server devices.
3. Check the **IP Address** and **Port**.
4. Enter your Windows **Username**.
5. If you use a domain account, enter the **Domain**.
6. Enter your **Password**.
7. Select **Connect via RDP**.
8. If ITVA asks for a one-time password, enter the code from your authenticator app and select **Verify**.

Your browser runs the RDP client and signs in to the server with Network Level Authentication (NLA). The probe relays the traffic, but ITVA does not receive or store your Windows password.

## Use the remote desktop

- To send Ctrl+Alt+Del to the server, select the keyboard button in the title bar.
- The remote desktop changes size when you change the size of your browser window.
- You can minimize, switch between, and reconnect sessions in the same way as SSH sessions. See [Connect to a device over SSH](https://www.itva.com/docs/connect/connect-to-a-device-over-ssh).

## Check that it worked

The Windows desktop shows in a full-screen window, and the status dot is green. The session also shows in **Settings** > **Logging** > **RDP Logs**.

## Troubleshooting

### The probe version is too old

If the error ends with "RDP requires probe version 5.0.2 or later.", upgrade the probe. Then try again.

### The server has no probe

Error: "The selected device does not have a primary or secondary probe assigned." Assign a primary or secondary probe to the server, then try again.

### The probe cannot reach the server

Error: "Probe failed to connect to device." Make sure that the port is correct. Make sure that the probe can reach the server on that port.

### The server rejects your sign-in

Check the username, domain, and password. Make sure that your account has permission to sign in to the server over RDP.

### MFA errors

- "MFA is enabled for this device and you have not set up MFA for your account." Set up MFA in your profile settings, then try again.
- "The supplied One-Time Password does not match this account." Enter the current code from your authenticator app.