What you need
- A Windows PC running Pro, Enterprise or Education. Microsoft's documentation says Home editions can't be connected to (Microsoft: allow access to your PC).
- Windows App on the Mac, from the Mac App Store. It replaces the old Microsoft Remote Desktop app (Microsoft: Remote Desktop client for Mac). Check the App Store listing for the macOS version it currently needs.
- A Windows account on the PC with a strong password, that's allowed to connect.
- The PC switched on and awake.
Step 1: Turn on Remote Desktop on the PC
-
Open Remote Desktop settings
On the PC, go to Start > Settings > System > Remote Desktop.
-
Switch it on
Turn on Remote Desktop, then select Confirm. Microsoft says to do this only on trusted networks.
-
Choose who can connect
Administrator accounts can connect automatically. Add anyone else under Remote Desktop users.
-
Note the PC's name or network address
You'll enter it on the Mac.
Step 2: Connect from the Mac with Windows App
-
Install Windows App
Get it from the Mac App Store and open it.
-
Add the PC
Add a PC and enter its name or IP address. You don't need to sign in to a Microsoft account for this.
-
Connect and sign in
Open the PC and sign in with its Windows username and password.
Windows App runs on Windows, macOS, iOS and iPadOS, Android and the web, but Microsoft says the web version can't reach remote PCs, so use the Mac app (Microsoft: Windows App overview).
Connecting from outside the office
Remote Desktop connects directly to the PC, so it works on the same network without extra steps. Microsoft describes three ways to reach it from outside (Microsoft: access your PC from outside):
- A VPN into the office network. This is what Microsoft says is preferable.
- Remote Desktop Gateway, a Windows Server role that gives encrypted access over the internet without a VPN (Microsoft: Remote Desktop Gateway).
- Port forwarding on your router. Microsoft calls it "not recommended".
Other ways in
If the PC runs Windows Home, or you'd rather not set up a VPN, use a remote-access tool that installs its own app on the PC and connects out. Chrome Remote Desktop is one: install the host on the PC from remotedesktop.google.com/access, set a PIN, and connect from a browser on the Mac (Google: Chrome Remote Desktop).
Some, like Chrome Remote Desktop with its one-time support code, can also help someone who's sitting at the PC. Windows Remote Desktop can't: it signs that person out of the screen. Compare remote access tools
The Aile Insight route
Aile Insight opens Windows Remote Desktop in a browser on your Mac, so there's no app to install on the Mac. A small app on the PC makes an outbound, encrypted connection, so there's no VPN, gateway or router change either. In a Remote Desktop session you can copy files to and from the PC.
The PC still needs Windows Pro or higher; we check this with you before setup. When you need to see someone's screen while they work, we set up screen sharing on that PC instead. Setup happens with you on a 20-minute call.
Reaching the PC when nobody's there
Remote Desktop doesn't need anyone at the PC to accept, so it's naturally unattended. The catch is power: Microsoft notes you can't connect to a PC that's off, asleep or hibernating. Set the PC's sleep setting to Never and leave it switched on.
Security
- Use strong passwords on every account in Remote Desktop users.
- Keep Network Level Authentication on. Microsoft says to turn it off only temporarily, for old clients.
- Keep Windows updated.
- Don't open port 3389 on your router.
- Remove people from Remote Desktop users when they no longer need access.
Troubleshooting
From Microsoft's troubleshooting guide (Microsoft: Remote Desktop can't connect):
- Can't connect at all. Check the PC is on and awake, and that its edition is Pro or higher.
-
The connection is blocked. Allow
Remote Desktop in Windows Firewall, or port 3389 on any
other firewall in between. From a Windows machine on
the same network, you can test with
Test-NetConnection -ComputerName <host> -port 3389. - The PC name isn't found. Use its IP address instead.
- You reach the sign-in screen but can't sign in. The account usually isn't in the Remote Desktop Users group.
- An older client can't connect. It may not support Network Level Authentication. Update the client rather than turning NLA off for good.
- Still stuck. Check whether antivirus software on the PC is blocking it.