Fork this repository and run the Windows Runner workflow, then ssh in using the command it gives you.
After you have done that, execute cmd in the runner and run these commands.
wget -O C:/Windows/zrok.exe https://github.com/meownyaaa/rdp-windows-workflow/releases/download/august2025/zrok.exe#
C:/Windows/zrok.exe enable PUTYOURACCOUNTTOKENHERE
powershell.exe Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server'-name "fDenyTSConnections" -Value 0
powershell.exe Enable-NetFirewallRule -DisplayGroup 'Remote Desktop'
powershell.exe Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "UserAuthentication" -Value 1
powershell.exe Set-LocalUser -Name "runneradmin" -Password (ConvertTo-SecureString -AsPlainText '@th1spmo' -Force)
C:/Windows/zrok.exe share private --backend-mode tcpTunnel localhost:3389
Commands taken from here.
Feel free to upload zrok somewhere else.
Run this on the machine you wish to connect from.
zrok access private PUTRUNNERSTOKENHERE --bind localhost:33389
Now, open RDP and connect using localhost:33389 and input the credentials.
Username: runneradmin
Password: @th1spmo

Be aware that the windows runner only has 360 minutes of runtime (or 6 hours exactly)
Zrok should give you the enable command when you sign up. If you accidentally closed out of it or have used zrok before and have forgotten where it is;
#
The last characters on the "access your share" is the runner's token.