Skip to main content
The Windows one-liner installs WireGuard and UltraVNC silently, registers the PC with ProxyLink, and makes it accessible via browser RDP/VNC from anywhere.

​
Prerequisites

  • Windows 10/11 or Windows Server 2012 R2 and later
  • PowerShell (run as Administrator)
  • Internet access on the target machine

​
Deploy

1

Create a Windows PC tunnel

In ProxyLink, go to Tunnels → + Add Windows PC. ProxyLink generates a one-time deploy command.
2

Run the command on the target PC

Open PowerShell as Administrator and run the generated command:
irm https://app.proxylink.dev/deploy/{token} | iex
The script installs WireGuard and UltraVNC silently. Takes about 30 seconds.
3

PC appears in your dashboard

Once the WireGuard tunnel connects, the PC registers its hostname automatically. You’ll see it online in your Tunnels list.
4

One manual step — enable VNC access

After the script finishes, right-click the UltraVNC icon in the system tray → Properties → Security tab → uncheck “VNC Password required” → click Apply, then OK.The script prints this instruction as a reminder. This step is required because UltraVNC ignores the INI setting for auth on fresh installs.
5

Connect via browser

Click VNC or RDP next to the device in your Proxy Links list. A browser terminal opens — no client software needed.

​
What the script installs

ComponentPurpose
WireGuardVPN tunnel back to ProxyLink
UltraVNCVNC server for browser access
ProxyLink AgentPolls every 60s for remote commands (push scripts, restart services)
ProxyLink WireGuard WatchdogChecks every 5 min if WireGuard service died — restarts it automatically. Prevents silent tunnel drops.

​
Deploy via RMM

The command works with any RMM tool that can run PowerShell: 
# NinjaRMM, Datto, ConnectWise Automate, GPO
irm https://app.proxylink.dev/deploy/{token} | iex
Each token is single-use and expires after 30 minutes. Generate a new one from the Tunnels page for each machine.

​
After deploy

  • VNC and RDP ports are only accessible through the WireGuard tunnel — not exposed to the internet
  • The ProxyLink Agent runs as a Windows scheduled task (SYSTEM account) — no window visible to users
  • To update WireGuard keys or push a new config, use the Update Config button on the tunnel row

​
Supported Windows versions

VersionStatus
Windows 11✓ Tested
Windows 10✓ Tested
Windows Server 2025✓ Tested
Windows Server 2022✓ Tested
Windows Server 2019✓ Tested
Windows Server 2016Expected to work (not explicitly tested)
Windows Server 2012 R2✓ Tested