Remote Desktop in Windows 11: what it can and cannot do

Windows comes with its own remote desktop mechanism, free and already installed. For some situations it is the best option available. For others it cannot work at all — and it is worth knowing which category your case falls into before losing an afternoon to it.

The two halves people conflate

There are really two distinct things here, and mixing them up causes most of the confusion:

• The client — the program you use to connect to another machine. Present on every edition of Windows, including Home.
• The host — a computer's ability to be connected to. Present only on Pro, Enterprise and Education.

So: from a Windows 11 Home machine you can connect anywhere. But to a Windows 11 Home machine you cannot connect this way. It is not a hidden setting and not something that can be switched on — the host component is simply not part of the edition.

If you have Home and you need that computer to be reachable, the conversation about the built-in feature ends here.

What it does very well

Worth stating plainly, because it is genuinely good at this:

Image quality and bandwidth. It does not stream a video of the screen; it describes what needs drawing. Text stays sharp even on poor connections, and it uses far less bandwidth than ordinary screen sharing.

Integration with your session. It signs into your Windows account, with your profile, mapped drives and redirected printers. It is your own desktop, not a window onto someone else's.

Network Level Authentication, on by default, which requires you to prove who you are before any session is created.

For a computer you use yourself, over the local network or through a VPN, it is a very solid option.

The two limits that surprise people

It locks the screen of whoever is there. Ordinary Windows allows a single interactive session. When you connect remotely, the session at the desk is locked — the person sitting in front of the machine sees nothing and cannot work. And the reverse: if someone signs in locally, your remote session is disconnected.

That makes it unsuitable for helping someone: you cannot show them what you are doing, because they cannot see the screen. This is not a flaw, it is a design decision — it was built so that you can be at your own computer remotely, not so that two people can look at one screen.

It has to be findable. To connect from outside the local network, the host needs an address you can call. That means a public address plus a router rule, or a VPN. Why that is a problem, and why other methods do not have it, is covered separately in Remote access without a static IP or port forwarding.

One thing genuinely not to do

Do not open port 3389 to the internet. It gets suggested on forums as the quick fix, and it is the worst advice in this field.

Public addresses are scanned continuously and automatically, and the remote desktop port is among the first ones looked for. An authentication service exposed directly to the internet receives login attempts around the clock, and access gained that way is a complete route into the machine and, from there, into the network. If you go with the built-in option, it belongs behind a VPN. No exceptions.

And the assistance side

Windows separately includes Quick Assist, an application for helping someone else. It works differently from remote desktop: the person being helped stays at their screen and can see it throughout, and the session starts from a code you give them. It needs no network configuration. Whoever is helping has to sign in with a Microsoft account.

Worth knowing it exists, because plenty of people search for "remote desktop" when this is what they actually need.

How to choose

Three questions, in this order:

1. Is the host on Home? Then the built-in feature is not an option. Move on.
2. Do you want to work on your own computer, or help someone else? If you are helping someone, remote desktop is the wrong tool — it locks their screen.
3. Do you already have a VPN? If yes, the built-in feature is a very good choice. If not, the real cost is not the software; it is the infrastructure you would have to build to use it from outside.

The remaining options, with what each one asks for, are in how to connect to your office computer from home.