diff --git a/.bazelrc b/.bazelrc
index 7d9f98f0..2676cf38 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -63,6 +63,7 @@ build:remote_windows_x64 --compiler=msvc
 build:remote_windows_x64 --action_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
 build:remote_windows_x64 --extra_execution_platforms=//platform/windows_x64
 build:remote_windows_x64 --extra_toolchains=//platform/windows_x64:cc-toolchain
+build:remote_windows_x64 --enable_runfiles
 
 # Options for private EngFlow clusters.
 # To use on your own cluster, change the URLs to your own endpoint.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 791ffec4..d9652c5c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -62,6 +62,13 @@ jobs:
             revision: d04e89854b3931f4aaced77aa3a2fcad5834b3a6
             remote_execution: 'true'
 
+          - os: windows
+            arch: x64
+            os_distribution: server
+            os_version: "2022"
+            revision: d04e89854b3931f4aaced77aa3a2fcad5834b3a6
+            remote_execution: 'true'
+
     steps:
       - uses: actions/checkout@v3
 
@@ -69,13 +76,21 @@ jobs:
         shell: bash
         run: cp infra/bazelrc .bazelrc.user
 
-      - name: Generate python requirements lock
+      - name: Generate python requirements lock (bash)
+        if: matrix.os != 'windows' && success()
         shell: bash
         run: bazel run //python:requirements.update
 
+      # msys2 bash mutates the last argument, removing one of the slashes.
+      # Use powershell instead, even though it's nearly the same command.
+      - name: Generate python requirements lock (powershell)
+        if: matrix.os == 'windows' && success()
+        shell: powershell
+        run: bazel run --enable_runfiles //python:requirements.update
+
       - name: Build and test
         env:
           ARCH: ${{ matrix.arch }}
           OS: ${{ matrix.os }}
           REMOTE_EXECUTION: ${{ matrix.remote_execution }}
-        run: python3 infra/test-all.py
+        run: python infra/test-all.py