diff --git a/agent/build.sh b/agent/build.sh
index bb7ed08..5b63053 100755
--- a/agent/build.sh
+++ b/agent/build.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 set -e
 
-VERSION="0.3.2"
+VERSION="0.3.3"
 APP_NAME="studioE5"
 BIN_NAME="studioE5-agent"
 LDFLAGS="-X main.version=${VERSION}"
diff --git a/agent/tailscale.go b/agent/tailscale.go
index ff063d8..d7eaca7 100644
--- a/agent/tailscale.go
+++ b/agent/tailscale.go
@@ -104,7 +104,10 @@ func startTailscale(dataDir, nodeID, headscaleURL, authKey string) (string, erro
 		"--hostname=" + nodeID,
 		"--accept-dns=false",
 	}
-	if runtime.GOOS != "windows" {
+	if runtime.GOOS == "windows" {
+		// On Windows, keep the VPN up even after the tailscale.exe CLI client disconnects.
+		upArgs = append(upArgs, "--unattended")
+	} else {
 		// --operator is only meaningful on Unix systems.
 		upArgs = append(upArgs, "--operator=root")
 	}