How to install an X server in Windows

Running Linux GUI applications on a Windows 11 desktop keeps cross-platform work practical when a full VM or remote desktop session is unnecessary. An Xserver provides the local display endpoint for X11, allowing graphical programs from remote Unix-like systems to open windows on the Windows desktop.

X11 is a network protocol where applications act as X clients and connect to an X server that owns the screen, keyboard, and mouse. On Windows, VcXsrv provides an X.Org-compatible X server and is configured via XLaunch, which sets the display number, window mode, and security options.

Using SSH X11 forwarding is the safest way to carry X11 traffic because it tunnels the connection and avoids exposing port 6000 to the network. Some environments already provide built-in GUI support (for example WSLg on Windows 11), while older WSL setups and remote servers still benefit from a standalone X server. Disabling X access control can simplify first-time setup, but it should be paired with restrictive firewall rules to prevent unwanted connections.

1. Download the latest VcXsrv installer from the official project page.

   https://sourceforge.net/projects/vcxsrv/

   

2. Run the VcXsrv installer executable.

   Only installers from the official project page should be trusted, and Windows SmartScreen prompts should be reviewed for the correct publisher.

3. Accept the defaults in the installer wizard to complete the installation.
4. Launch XLaunch from the Start menu.
5. Select Multiple windows with Display number set to 0.
6. Select Start no client for Client startup.
7. Enable Clipboard in Extra settings.
8. Select Disable access control in Extra settings.

   Disabling access control allows any reachable client to connect to the X server, so firewall rules should remain restricted to trusted networks and SSH tunneling should be preferred.

9. Save the configuration to a .xlaunch file for quick reuse.
10. Click Finish to start VcXsrv with the saved settings.
11. Allow VcXsrv through Windows Defender Firewall on Private networks only.

    Allowing Public networks can expose the X server to untrusted networks.

12. Confirm the VcXsrv icon is present in the system tray.
13. Set the DISPLAY environment variable in PowerShell to match the running X server display.

    PS> $env:DISPLAY = "localhost:0.0"

14. Connect to the remote Linux host with SSH X11 forwarding enabled.

    PS> ssh -X user@server.example
     
    user@server.example's password:
    Welcome to Ubuntu 24.04.1 LTS (GNU/Linux 6.8.0-xx-generic x86_64)

    Remote servers that disable X11Forwarding or lack xauth will reject X11 forwarding requests.

    Related: How to configure the log level for an SSH server

15. Start a simple X11 program on the remote host to verify graphical output.

    $ xclock

    

    If xclock is missing on Ubuntu or Debian, install a test suite with:

    $ sudo apt update && sudo apt install --assume-yes x11-apps

16. Exit VcXsrv from the system tray when no longer needed.