Help › Add devices › C4

Reach a device at any time, even when nobody is sitting at it

Set up the service, set a fixed device password and allow access without confirmation — then a computer is reachable after every restart and at the sign-in screen.

Preview this guide has not yet been clicked through on a real device. Button names and steps come from the program but may differ in details.

For: Technician · Account administrator · Employee working from home
Applies to: Cloud · Own relay
Licence: Service “Unattended access” (not in Free)
Controlled device: Windows · Linux · macOS
Control from: Program (Windows, macOS, Linux) · Browser · Phone/tablet/Fire TV

What it is for

You want to control a computer nobody is sitting at — a server, your office computer from home, a customer's device overnight. That takes three things: BrowserDesk runs without an open window (service), the device has a fixed password, and it accepts connections without confirmation.

What you need

Cloud or your own relay. In Free every session must be confirmed at the device — this does not work there.
The device belongs to your access (C2).
Windows: administrator rights for the service.
Linux: set up the service; for the sign-in screen BrowserDesk installed as a package (deb/rpm) and the administrator password once.
Mac: there is no service. A Mac can be reached as long as a user is signed in, and it needs the permissions from C5.

How to do it

1. Set up the service (Windows, Linux)

Open BrowserDesk on the device → EinstellungenFernzugriff (Settings > Remote access).
In the card Systemdienst (System service) click Dienst installieren (Install service). Windows asks for administrator rights.
On Windows, BrowserDesk then starts with the computer and stays reachable even when nobody is signed in. On Linux it starts with your sign-in.
Linux, sign-in screen: in the card Zugang vor der Anmeldung (Access before sign-in) turn on Anmeldebildschirm fernsteuern (Control the login screen remotely). The administrator password is asked for once.

Many Windows devices at once: the MSI sets up the service as well (C3).

2. Set a fixed password

On the start page, in the card Ihr Desktop (Your desktop), click the key symbol Eigenes Passwort setzen (Set own password) under “EIGENES PASSWORT” (own password).
Enter at least 6 characters, Setzen (Set).
Optionally turn off Systempasswort aktiv (System password active) — then only your own password is valid.

Centrally for many devices: in the console Devices → the device's menu → Set password. The device takes it over at its next sign-in to the relay, even if it was offline.

3. Allow without confirmation

EinstellungenSicherheit (Settings > Security) → card Zugriffssteuerung (Access control).
Under “WER DARF ZUGREIFEN” (who may access) choose Automatisch zulassen (unbeaufsichtigt) (Allow automatically — unattended).

4. Make it reachable (Mac, and without service)

In the card Ihr Desktop (Your desktop) turn on Eingehende Verbindungen zulassen (Allow incoming connections). With the service, it says „Der Dienst nimmt Verbindungen an“ (the service accepts connections) instead.

How you know it worked

The card Systemdienst (System service) shows „Status: Läuft (Autostart + Auto-Update)“ (running).
The card Ihr Desktop (Your desktop) says „Der Dienst nimmt Verbindungen an“.
You connect with device ID and password (D2) without anyone clicking at the device — also after a restart of the device.
In the Windows notification area the menu of the BrowserDesk symbol shows „Bereit (Dienst)“ (ready, service).

What the other side sees

No dialog. On Windows a small session window with your name appears at the top right during the session; on Mac and Linux the BrowserDesk window turns into this card. Through it the person at the device can end the session at any time (F1).

Good to know

Free: the setting Automatisch zulassen (unbeaufsichtigt) does not help there — every session must be confirmed at the device. For unattended access you need the Cloud (prices) or your own relay.
At the Windows sign-in screen and in User Account Control prompts you can only control with the service (E6).
Restart remotely and be reconnected afterwards: E17.
Mac: before a user signs in, a Mac cannot be reached.
Remember the password: tick Zugangsdaten speichern (Save credentials) when connecting. On Windows it is stored encrypted for your Windows account on this computer; on Mac and Linux in your account's address book, unencrypted.
Lockout after failed attempts: after five wrong passwords from the same direction the device refuses attempts for a while — first 30 seconds, longer on repetition, at most 15 minutes.
Remove the service again: Dienst entfernen (Remove service) in the same card (C8).
More protection: control only from the device's own access (B6), only from trusted networks (B7).

If it does not work

You see	Meaning and fix
„Der Zugriff wurde am Gerät abgelehnt oder nicht rechtzeitig bestätigt.“ (refused or not confirmed in time at the device)	The device is still set to Nachfragen (Bestätigung am Gerät) (Ask — confirm at the device) — or the device is in Free. Check step 3; in Free it does not work without confirmation.
„Falsches Passwort — bitte das richtige Zugriffs-Passwort eingeben.“ (wrong password)	Password wrong or empty. The device never accepts an empty password.
The device is offline after a restart	No service set up (step 1). On Linux the service only starts with the sign-in — for the sign-in screen turn on Zugang vor der Anmeldung (Access before sign-in).
Linux: „Nicht verfügbar (Paketinstallation erforderlich)“ (not available, package installation required)	BrowserDesk was not installed as a package (C1).
The picture at the Windows sign-in screen stays covered	No service. Set up the service (E6).
The Mac shows no picture or cannot be controlled	Permissions are missing (C5).

← Deploy many devices at once — MSI with access and deployment key Give a Mac the permissions for screen and control →