Sign in required to download. You must sign in to connect and authorize this PC to your account.

Sign in to continue →

Add a PC

One installer. No admin prompt.

windows 10 · windows 11 · per-user install

It installs to your user folder, starts at every logon, and needs no Python, no terminal and no config file. Live view needs nothing extra either — the tunnel and a private subdomain are provisioned the moment the machine pairs.

  1. 01

    Run the installer

    It installs to your user folder and registers DeskWarrant to start when you log in. There is no administrator prompt at any point — the agent is deliberately unelevated, so asking for admin would claim a privilege it never uses.

  2. 02

    Approve this PC

    The agent opens your browser to an approval screen and shows a four-character code. Pick the matching one out of four. A wrong pick denies the request outright, which is what stops a mailed link from enrolling someone else's machine into your account.

  3. 03

    That is it

    The machine appears in Devices as online and reconnects on its own after a reboot. Ask, Act, Watch and Control all work immediately.

Expect this

Windows will warn you first.

The build is not code-signed, so Windows shows “Windows protected your PC”. That is what an unsigned installer looks like, not a verdict about the file. Click More info, then Run anyway — the button only appears after More info.

Verifying it: SHA-256 checksums are published with every release, and the build that produced them is public.

Once paired

What it can, and cannot, do.

Runs unelevated
It cannot reach the lock screen, UAC prompts, or anything needing administrator rights.
Folders you choose
A fixed allowlist that can only be widened on the PC itself — never from here, never by the assistant.
No delete tool
It can list folders and open files inside the ones you allow. There is nothing in the catalogue that removes anything.
Reachable only while watched
The tunnel starts when you open live view and stops seconds after you close it.

Remove a machine any time from its page in Devices. Revoking takes effect on the agent’s next poll, within a few seconds.