How To:

Your Complete Guide to Using Remote Desktop on the Microsoft Surface and Windows 8

Remote Desktop gives you access to your Windows 8 PC or device from wherever you are to run your applications and access your files remotely.

Left an important document on your work computer? Want to run a legacy x86 desktop app from your Surface?

You can use Remote Desktop to access that document or app from your laptop, tablet, or desktop instead of running back home or to the office. All you need to do is set up the connections and permissions to enable the devices you want to have access to and gain access from.

Launching Remote Desktop

From the Start screen in Windows 8, you can simply type in "Remote Desktop" to access the program. If you don't already have it installed, you can download it from the Windows Store.

Enabling Remote Connections to Your Windows 8 Machine

Before you can remote desktop into your machine, you'll have to allow remote access on each of the machines you want to remote desktop into. You can do so from the desktop by going to Charms -> Settings -> Control Panel -> System and Security -> Allow Remote Access.

Once Remote Access is open, you will need to select the radio button to Allow remote connections to this computer. This will make your computer start listening for remote desktop (RDP) connections on TCP port 3389.

If you are going to be connecting to this machine from other Windows computers, tablets, phones, or other properly licensed Remote Desktop clients, then checking the second box, Allow connections only from computers running Remote Desktop with Network Level Authentication, is advised as it increases the security requirements for the connection. This allows only trusted Microsoft-friendly devices to access your computer.

Here is what the Microsoft Support page has to say about Network Level Authentication (NLA):

"Network Level Authentication (NLA) is a new authentication method that completes user authentication before you establish a full Remote Desktop connection and the logon screen appears. This is a more secure authentication method that can help protect the remote computer from hackers and malicious software."

If you're trying to connect to your Windows 8 computer with a device that is not running a Windows OS, or are using a third-party remote desktop program that hasn't been properly licensed to use NLA, you will have to UNCHECK that box (just be warned, this is less secure).

Power Options

Once you have chosen to allow remote connections and your computer is set up to go to sleep or hibernation when not in use, this prompt will pop up.

As it states, if your computer is off, you of course cannot connect to it. So, if you are planning to remotely access your desktop, you will need to go to Power Options and disable sleep and/or hibernation for constant access. You can find these options under Advanced Settings.

After you have taken care of that, your computer is ready for remote access.

Connecting to PC from Your Microsoft Surface (Locally)

You can easily control your Windows 8 computer's desktop using a Microsoft Surface. This will allow you to remotely run your legacy x86 desktop apps that cannot run on the ARM-powered Windows RT. For this connection, I remained on the same local network, which cuts out a few extra steps required to connect from a different network. All you need to know is the name and login information of the computer you want to remotely control.

From your Surface, launch the Remote Desktop application. It will ask you for the name of the computer you wish to connect to. Here you can use the IP address, or the computer name of the PC you want to connect to (You can find the computer name of the PC you want to connect to by opening the file explorer on that PC and right-clicking on Computer, then clicking Properties). After clicking connect, you'll be prompted to enter your login information. This is the same username and password you use to log into your computer locally.

Image via

Once that information is verified, you might see a pop-up warning about your security certificate. As long as you know the network you're connecting from is safe, you can ignore this warning and hit Connect. Wait for the connection to take over, and you should be good to go.

Here's what it looks like on my Surface.

Notice the blue bar at the top showing the name of the computer I am remotely controlling. It is not liquid-smooth connection, but definitely more than adequate for common tasks.

Connecting via the same network is very smooth and user friendly on the Surface or any other local device. But when you want to connect from a different network, the process is a little more complicated.

Using Remote Desktop from Outside Your Home Network

Enabling Remote Access was the easy part, now we have to make sure we can connect from outside our local network. To do this, we're going to need to forward a port on our router so our public IP address points at the private IP address of the PC we want to connect to. If that sounds forign to you, don't worry. We'll walk you through it.

Step 1: Find the IP Address of the PC You Want to Connect To

To do this you can go to Control Panel -> Network -> Network and Sharing Center. You can also access the menu by right-clicking the computer icon at the toolbar on the desktop.

From there, select Local Area Connections -> Details. Your connection details will pop up. You need to take down the IPv4 Address (highlighted below). This is your private IP address. Most private IPs will look something like 192.168.1.X, 192.168.0.X, 192.168.100.X, or 10.X.X.X.

Step 2: Login to Your Router

If you want to access your computer remotely from a location outside of the local or home network, you need to set up the router to forward the remote requests from the computer you are using, to the private IP of PC you want to access (which you found in the previous step).

To do this, you'll need to login to your router. Typically this can be done by replacing the last digit of your private IP address with a 1, and typing it in your web browser's address bar. For example, if your private IP address is, your router's IP address would be

If you do not know what your router address is, you can usually find it on the router itself or inside the instruction manual it came with. If you can't find it there, you can always contact your internet service provider and ask one of the technicians.

When you have the router address, type it directly into the address bar in your browser and hit Enter. You should be prompted for a username and password to login to your router.

If you don't know the password, check your router's manual. Typically the default username/password will either be admin/admin, admin/password, administrator/administrator, or it may even be blank (using the username admin).

Type in your username and password to gain access to the configuration screen.

Step 3: Enable Port Forwarding

Once logged into your router, look through the menus. As every router is a little bit different, we can't give 100% exact instructions, but you should be able to find a section called Port Forwarding or Port Mapping. If you do not see it, try browsing to the advanced settings area first.

Once there, you'll see options to forward port ranges of both TCP and UDP to a specific IP address. You'll want to add an entry that forwards TCP port 3389 (if prompted for 2 port numbers, just type 3389 in both fields) to the private IP address of your PC (which you found in step 1).

This will ensure that Remote Desktop Connections going to your public IP address will be forwarded to your local PC.

Step 4: Find Your Public IP Address

Now you are almost ready to remotely connect. All you need to do is find your public IP address to use to connect to it from outside your network.

From the PC you want to connect to, you can find out your public IP address by going to or

Note: Several internet providers will give you dynamic IP addresses that might change every few days, or even every time you log in. To avoid having to find your public IP address every single time, you can enable dynamic DNS using one of the many providers, to assign a domain name that will always be up to date with your home connections public IP address.

Step 5: Remote Desktop into Your Home PC from Your Surface

Now, from your Surface (or any other PC), outside of your local network, launch your remote desktop program. Type in the public IP address for your home PC that you found in Step 4.

Click Connect, enter your login information, and you are all ready to go. Full access to your home PC from anywhere in the world!

If you have any issues getting Remote Desktop set up, you can take a look at Microsoft's Support Page for answers from both Microsoft employees and the community. If someone else has already had the same issue solved, it could save you a bunch of time.


Keeps telling me port 3389 is not a valid port number..any suggestions?

Where are you getting that error? In your router? or when connecting. Did you already forward the port, or is that where you're running into trouble? If so, what's the make and model of your router?

In my router as I'm trying to apply the required settings. I'm using the Asus RT-N56U

Ah. Looks like that router has a confusingly labeled interface. This video goes over the full process fairly well... If you already know all the IPs / ports you want to forward, you can jump to around 3:30 to see the process in the router admin site. Looks like you need to go to "Virtual Server" instead of "Port Forwarding". Cheers!

I'm using a Netgear WNDR3400 and when trying to port forward, these are the info fields I have:

Service Name: _____
Service Type: TCP/UDP or TCP or UDP
External Starting Port: _____ (1~65535)
External Ending Port: _____ (1~65535)
Use the same port range for Internal port (optional check box)
Internal Starting Port: _____
Internal Ending Port: ______
Internal IP address . . .

I select TCP and enter 3389 in the external starting and ending port areas, it places 3389 into the internal starting and ending port areas, I add my IP address, and I get this failure message:

"The specified port(s) are being used by other configurations. Please check your configurations of Remote Management, Port forwarding, Port Triggering, UPnP Port Mapping table, RIP, and Internet connection type"

I've followed all the steps and haven't had any problems until this last step. Basically, I cant get port forwarding to TCP 3389 to work by using the method shown in step 3. any suggestions?

Brian, you need to go to "remote management" and look at the bottom right. Is your port the same here that you are wanting to use? Change this port to 8080.

If you would like to power on your PC before starting your remote desktop session, you can consider using RemoteWaker. This could save some power consumption over the long run. Also, in case, if you would like to support anyone remotely, you don't have you wait for them to start a remote desktop session.

My 2 cents: Remote Desktop is pretty good. I used to be a huge fan. But recently I tried RHUB's remote access, and I'm totally converted. It's easier to use, and it's very secure.

My System Properties window does not look like the one you have pictured in this tutorial. It only has a check box that allows me to "Allow Remote Assistance connections to this computer". It does not have the radio buttons at the bottom of the window that let me set up remote connections to the PC or to turn on NLA. I am running Windows8 v6.2 (build9200).


Did you find any answer for your question? Because I have the same problem - no any radio buttons in settings. Windows 8.1

I know this is an old post but I did everything and when I try to connect with my surface 2 it keeps saying "Can't connect to the remote PC, make sure the PC is turned on and connected to the network, and that the remote access is enabled." My PC is open and connected but it keeps giving this error. I wanted to know is it because my pc is running Windows 7?

When connected to a remote host from the Surface, how do you type in text to an application on the host? I tried the keyboard tool that you can get by sliding out the options on the side, then Settings > Keyboard. I can type, but the characters do not go to the host application.

Wow can't use my account messaging texts or any of my email because someone synced my account to a PC windows 8 and my phone lets me know and these freaks are like playin dumb WOW I feel so set back and they are the ones that say MOVE FORWARD yet I am being intercepted from terroristic activities because it is interfering with my and my children being able to communicate so ....... Just know u kinda folk is just sick

Share Your Thoughts

  • Hot
  • Latest