Running an agent on a server to remotely control a Windows PC: you need a local runner
A server-side agent cannot reach into a Windows desktop on its own. The working pattern is two agents: a lightweight runner on the PC that executes commands and opens apps, and the server agent that plans and talks to it over a private tunnel such as Tailscale. Keep the PC runner's permissions tight — it can do anything the user account can.