Sign-in bound to the security chip
The host’s sign-in is bound to the device’s security chip where available (TPM on Windows and Linux, Secure Enclave on Mac), and every pairing is additionally tied to a hardware fingerprint of the host.
Swiss company · GDPR-compliant
Pro feature · unattended access
Unattended access — maintain devices with no one in front
With unattended access you connect to servers, kiosk systems and customer PCs without anyone having to confirm the connection. Secured by a host sign-in bound to the security chip, mandatory two-factor authentication for admin roles and logged sessions — peer-to-peer, hosting in Switzerland.
What is unattended access?
Unattended access refers to remote access to a device that no one is sitting in front of to confirm the connection. The host is installed as a service and accepts connections as soon as an authorised, authenticated technician signs in — around the clock. The trust relationship is established once during setup and secured by a pairing tied to a hardware fingerprint of the host.
The counterpart is attended access, where someone at the device actively confirms every incoming connection. Both models have their place — unattended for scheduled maintenance and device pools, attended for spontaneous help. More on the bigger picture on the remote maintenance page.
What you need unattended access for
- Server maintenance — systems in the server room or data centre that no one sits in front of. See system administrators use case.
- Device pools & fleets — IT service providers that patch dozens of customer PCs and roll out software at night. See IT service providers use case.
- Kiosk & digital signage — display systems, info terminals and Raspberry Pi setups that are maintained remotely.
- Maintenance outside office hours — apply updates when no one is working, instead of disrupting operations.
- The family PC without asking — authorise your parents' device once and help them in future without anyone having to read out a code.
Security: unattended does not mean unprotected
A device with no one present is an attractive target — that is why unattended access at WinDesk is secured on several levels:
Mandatory two-factor
Compulsory for admin roles: TOTP or passkey (WebAuthn/FIDO2). Administrators and all accounts with Pro set up two-factor authentication right after their first login; sensitive actions require a fresh confirmation.
Visible session indicator
While someone is connected, the host shows a “Remote support active” notice at the edge of the screen with the connection duration. It can be collapsed but not hidden.
Audit trail & revocation
Sessions, new and revoked pairings and role changes are logged. You can revoke a host pairing in the portal at any time; the host then loses unattended access. If you remove a team member, their pairings end too.
In addition, every new link triggers a security email. The full overview on the security page.
How to set up unattended access
- 1. Install the host as a service. Install the WinDesk host on the target device — it runs in the background, even when no one is logged in.
- 2. Authorise the device. During setup the host is paired with your account; the pairing is tied to a hardware fingerprint of the host.
- 3. Manage in the portal. All hosts appear centrally with online status and last connection, sortable into groups. Roles define what each team member may do.
- 4. Connect. As an authenticated technician you connect at any time — without anyone having to confirm on site.
An overview of all features on the Features page.
Pro or prepaid — clearly priced
Unattended access is part of WinDesk Pro (CHF 29.90/month). Included are 100 hosts, central host management, groups and roles, audit logs and passkey authentication. Every additional 100 hosts cost CHF 12.90/month — linear, without bundle tiers. Only the helping side needs a licence; the hosts draw from the host quota. Free and Light offer attended access. It also works without a subscription — prepaid credit unlocks the same features for as long as credit is available (unattended access, host management, file transfer, session log), at CHF 0.20 per minute of connection or part thereof and CHF 0.30 per host per month. The team features are not included — several named users, role management and IP allowlists remain reserved for Pro. Below around 100 connected minutes a month, credit costs less than a subscription. All prices compared.
Frequently asked questions — unattended access
What is unattended access?
Unattended access means connecting to a device that no one is sitting in front of to confirm the connection — such as a server, a kiosk system or a customer's PC outside office hours. The trust relationship is established once during setup (a pairing tied to a hardware fingerprint of the host, authorised by the owner); after that, your authenticated sign-in is enough to connect.
How does it differ from attended access?
With attended access, a person is present at the target device and actively confirms every incoming connection — typical for spontaneous support. With unattended access, the device accepts connections without this manual confirmation, provided the technician is authenticated — typical for server maintenance and device pools that need to be reachable around the clock.
Is unattended access secure?
Yes — unattended does not mean unprotected. The host’s sign-in is bound to the device’s security chip where available (TPM on Windows and Linux, Secure Enclave on Mac), and every pairing is additionally tied to a hardware fingerprint of the host. Two-factor authentication is mandatory for admin roles (TOTP or passkey), and every session is logged. Details on the security page.
Does the device owner have to approve every connection?
Consent is given once during setup: the owner installs the host as a service and authorises the device. After that, no renewed confirmation per session is needed — that is exactly the point of unattended access. A session indicator at the edge of the screen still shows when a connection is active, and access can be revoked at any time in the portal.
Is unattended access included in the free plan?
No. Unattended access is a Pro feature (CHF 29.90/month) and includes 100 hosts as well as central host management. The Free and Light plans offer attended access. Without a subscription, prepaid credit also unlocks unattended access for as long as credit is available — at CHF 0.20 per minute of connection or part thereof and CHF 0.30 per host per month. The team features (several named users, role management and IP allowlists) remain reserved for Pro. A comparison of all plans is on the pricing page.
How many devices can I manage unattended?
Pro includes 100 hosts. Every additional 100 hosts cost CHF 12.90/month extra — linearly scalable, without bundle tiers. The hosts can be sorted into groups (customers, locations, servers) in the portal; your team members get one of four roles (owner, admin, supporter, read-only).
What happens when an employee leaves the company?
An admin can remove the user in the portal at any time; their pairings end with that. You can also revoke a host pairing at any time; the host then loses unattended access. You also get a security email for every new link.
Set up unattended access
Prepaid credit unlocks unattended access without a subscription — CHF 0.20 per connection minute, no card on file. Servers, kiosk systems and customer PCs reachable around the clock.