cloudflared

For managed Windows deployments, configure Cloudflared as a service rather than leaving it tied to an interactive user session. Cloudflare’s official Windows service docs show placing the executable under C:\Cloudflared\bin, renaming it to cloudflared.exe, and installing the service from an elevated command prompt with cloudflared.exe service install.

Because the Windows service runs under the system profile, copy tunnel credentials into the system-profile Cloudflared directory and point the tunnel configuration at that location. The documented flow creates C:\Windows\System32\config\systemprofile\.cloudflared, copies cert.pem there after cloudflared.exe login, and uses a config.yml with tunnel: and credentials-file: values before starting the service. Source: Cloudflare Cloudflared Windows service docs.