# Access Windows host over the internet

**URL:** <https://forum.ansible.com/t/access-windows-host-over-the-internet/6856>\
**Category:** Get Help\
**Tags:** windows, receptor\
**Created:** [June 30, 2024, 7:29pm UTC](https://forum.ansible.com/t/access-windows-host-over-the-internet/6856 "2024-06-30T19:29:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [June 30, 2024, 7:29pm UTC](https://forum.ansible.com/t/access-windows-host-over-the-internet/6856/1 "2024-06-30T19:29:53Z")

</div>

Hi,

Are there some possibilties to manage a windows server over the public internet with Ansible?  
I have no possibility to add execution\_nodes to the network. These are single machines on different places and no vpn between.

Is there some agent or is there an option to use receptor windows agent to manage the machines?

---

<div class="post-metadata">

**Author:** ![McGlovin](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/mcglovin/32/3698_2.png) [@McGlovin](https://forum.ansible.com/u/McGlovin)\
**Post date:** [July 1, 2024, 3:25pm UTC](https://forum.ansible.com/t/access-windows-host-over-the-internet/6856/2 "2024-07-01T15:25:27Z")

</div>

I presume the goal is to not open ports across the public internet, even if tied to specific source addresses.

I have a similar requirement in some cases and use a tool named “Remote.It” to establish a secure P2P tunnel. You basically install an agent/app on your target node, publish the required ports you want to connect to as a service, and then “request” a connection to the service from the source node. The target then establishes a P2P connection back to you.  
The connection is then bound to localhost on a random port.

I’m sure there are other similar Zero Trust type tools, but haven’t used them.

I also notice NetFoundry have this: [Ansible Security Cloud](https://netfoundry.io/ansible-security-cloud-zero-trust/) - built upon OpenZiti, which looks interesting.  
However, again, I have no experience of using it, would be interesting to hear if anyone else has!

---

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [July 1, 2024, 8:10pm UTC](https://forum.ansible.com/t/access-windows-host-over-the-internet/6856/3 "2024-07-01T20:10:06Z")

</div>

yess the goal is not to open ports accross the public internet.

Thx for links I go check these.  
Maybe tailscale is also a solution.

Does anyone know If I can use a receptor hop for this?

---

<div class="post-metadata">

**Author:** ![gundalow](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/gundalow/32/99_2.png) [@gundalow](https://forum.ansible.com/u/gundalow)\
**Post date:** [July 2, 2024, 9:29am UTC](https://forum.ansible.com/t/access-windows-host-over-the-internet/6856/4 "2024-07-02T09:29:21Z")

</div>

> [@daemenseth](#):
>
> Is there some agent or is there an option to use receptor windows agent to manage the machines?

I’ve not used it, though there are [Windows builds of Receptor](https://github.com/ansible/receptor/releases).

Try that, I’d be interested to hear how you get on.