Connect to a Windows VM's SAC

Windows

This document describes how to connect to theWindows Special Administrative Console (SAC).The SAC uses a serial port connection to a Windows virtual machine (VM) instanceand doesn't rely on network connectivity, which can help troubleshoot or recovera Windows VM instance. By connecting to the VM's serial console and using the SAC,you can interrupt the VM's boot process or gain access to a CMD or PowerShellterminal to perform troubleshooting. For a general purpose remote desktopexperience other than troubleshooting,connect to Windows VMs using RDP.

Before you begin

Caution: The interactive serial console does not support IP-based accessrestrictions such as IP-based include lists or exclude lists. If you enable theinteractive serial console on an instance, anyone from any IP address is able toconnect if they know a local username, project ID, zone, and instance name.

Connect to the Serial Console

To connect to your Windows instance using an interactive serial console,complete the steps in one of the following tabs.

Permissions required for this task

To perform this task, you must have the followingpermissions:

  • compute.instances.setMetadata on the VM if enabling interactive access on a specific VM
  • compute.projects.setCommonInstanceMetadata on the project, if enabling interactive access for all VMs in the project
  • iam.serviceAccountUser role on the instance's service account

Console

  1. In the Google Cloud console, go to theVM instances page.

    Go to VM instances

  2. Click the name of the VM you want to connect to.

  3. ClickConnect to serial console to open the interactiveconsole.

The interactive serial console opens. It's ready to use when you see thefollowing output:

Computer is booting, SAC started and initialized.Use the "ch -?" command for information about using channels.Use the "?" command for general help.SAC>

If the interactive serial console is a blank screen with a blinking cursor,it is likely because theEmergency Management Servicesare off.Seetroubleshooting interactive serial consoleto learn how to resolve this issue.

gcloud

Use thegcloud compute connect-to-serial-portcommand to connect toVM instances that have serial port access enabled:

gcloud compute connect-to-serial-portVM_NAME \    --port=2 \    --zone=ZONE \    --project=PROJECT_ID

Replace the following:

  • PROJECT_ID: the ID of the project that containsthe VM
  • ZONE: the name of the zone in which theVM is located
  • VM_NAME: the name of the VM

The interactive serial console opens. It is ready to use when you see thefollowing output:

Computer is booting, SAC started and initialized.Use the "ch -?" command for information about using channels.Use the "?" command for general help.SAC>

If the interactive serial console is a blank screen with a blinking cursor,it is likely because theEmergency Management Services are off.Seetroubleshooting interactive serial consoleto learn how to resolve this issue.

For information about using the interactive serial console, see the MicrosoftSAC Commands documentation.

Open Command Prompt in Windows SAC

To open Command Prompt in the SAC, do the following:

  1. Typecmd, then pressEnter. You see the following output:

    SAC>cmdThe Command Prompt session was successfully launched.SAC>EVENT:   A new channel has been created.  Use "ch -?" for channel help.Channel: Cmd0001SAC>
  2. Use thech -snCHANNEL_NAME command, then pressEnter.

    ch -snCHANNEL_NAME

    ReplaceCHANNEL_NAME with the name of thechannel you created in the previous step.

    The output is similar to the following:

    Name:                  Cmd0001Description:           CommandType:                  VT-UTF8Channel GUID:          28de7392-5413-11ea-bb03-c9656a2ed613Application Type GUID: 63d02271-8aa4-11d5-bccf-00b0d014a2d0Press <esc><tab> for next channel.Press <esc><tab>0 to return to the SAC channel.Use any other key to view this channel.
  3. PressSpace, then login with the local credentials registered on thesystem.

    Please enter login credentials.Username:USERNAMEDomain:DOMAIN (leave blank if no domain)Password:PASSWORD
    Note: If you are unsure of the credentials, you might be able tocreate orreset the password.

    Once connected, you have access to a Command Prompt shell.

    Microsoft Windows [Version 10.0.14393](c) 2016 Microsoft Corporation. All rights reserved.C:\Windows\system32>
  4. Optional: To enter a Powershell prompt, typepowershell.exe, then pressEnter.

    Note: Pasting into the SAC Powershell terminal might result in repeatedcharacters in the pasted text. You can prevent this on a per-session basis by issuing theRemove-Module PSReadLine command in your terminal.

What's next

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.