In the ECS console, you can log in to a Windows instance through ECS Terminal or VNC. Only password authentication is supported.

Limits

The number of users that can remain logged in to an ECS instance varies based on the login method and user type. See details in the following table:

User type/Login method	VNC	ECS Terminal
Cloud platform account	Multiple authorized accounts (primary accounts or IAM users) can log in to an instance at the same time. The number of accounts is not limited. tip When multiple accounts are logged in, they can see the same console and share all actions.	A primary account (including all IAM users under it) can have a maximum of 100 remote connections open at the same time.
Operating system user	Only one user can log in to an instance at a time.	This depends on the operating system configuration. If multiple users cannot log in simultaneously, the remote connection of the previous user will be automatically disconnected when a new user logs in.

Prerequisites

Make sure the ECS instance you log in to meets the conditions in the Login restrictions.

When you log in through ECS Terminal, make sure the security group associated with the primary network interface of the instance has an inbound rule that allows TCP port 3389 from 100.64.0.0/10.

Procedure

ECS Terminal (Recommended)

VNC

tip

ECS Terminal supports text copy and paste for a smoother interaction experience, and is the recommended method. ECS Terminal is applicable to scenarios where the instance is in the Running state and the operating system runs normally.

Log in to the ECS console.

In the top menu bar, select the region and project where the target instance resides.

Click "Connect" in the "Actions" column of the target instance.

Click the "Log in now" button under ECS Terminal.

On the "Remote login" page, configure login information by referring to the table below.

Configuration Item	Notes
Port	When you log in to a Windows instance, RDP uses its default port (3389). Make sure the security group associated with your instance allows inbound TCP traffic on port 3389. tip If you need to change the connection port of your target instance, please refer to Changing the ECS default remote port. After this, you can log in to the instance with the updated port. If the security group associated with the instance does not allow the corresponding port, please refer to Viewing/Modifying security group access rules, or Changing security group to complete the operation.
Username	The default login username for Windows instances is Administrator. tip You can also create a new user and log in with a custom username.
Authentication method	Password authentication: The login password is the one you set when creating the instance. If you forget your password, please reset the password first. tip For instances created using custom or shared Windows images, you can log in to the instance with the image's pre-configured password after adjusting the Cloudbase-init file of the image. Learn more.

You can check "Save the login information and login credentials, and quickly log in next time". Then, click the "Login" button.

If the login succeeds, you will be directed to the Windows desktop.

If login fails, you can click "Diagnosis now" or on the remote login page. Then, use the Instance Diagnosis feature for quick troubleshooting. You can also refer to What should I do if I cannot remotely connect to the instance? for troubleshooting.

Copy text: Due to Safari and Edge browser restrictions, after you log in to a Windows ECS instance through ECS Terminal, you cannot directly copy text to or from the instance. As a workaround, use the clipboard interception mini program to copy text.

Elastic Compute Service