This topic provides answers to some frequently asked questions about Elastic Desktop Service (EDS) management for administrators.

What types of desktops can be used for cloud desktops and how am I billed for cloud desktops?

The specifications of cloud desktops consist of computing resources and storage resources. Computing resources include vCPUs, memory, and GPUs. Storage resources include system disks and data disks. To meet different business requirements, Alibaba Cloud provides a variety of cloud desktop types, including General Purpose, Basic Office, Advanced Office, Performance, Graphics, and Advanced Graphics. For more information, see Cloud desktop types.

You are charged for the resources of different types of cloud desktops. Cloud desktops support the subscription and pay-as-you-go billing methods. You are also charged for Active Directory (AD) connectors, network bandwidth, and Apsara File Storage NAS file systems. For more information, see Billing overview.

Can I continue to use cloud desktops even if I have overdue payments within my account?

If your account balance including cash and coupons is insufficient, the payment becomes overdue. If your payment becomes overdue, your account system and the billing method of your cloud desktops determine how the cloud desktops are affected. In most cases, you can continue to use subscription cloud desktops. You cannot use pay-as-you-go cloud desktops if you have overdue payments in your account. For more information, see Overdue payments.
Notice When an AD connector becomes unavailable due to overdue payments, all cloud desktops within the corresponding workspace become unavailable.

Why am I unable to select users when I create a cloud desktop?

If the drop-down list of users is empty, no users exist. You can create users by using one of the following methods based on your account type:

What do I do if I am unable to create a cloud desktop?

If you send a large number of requests to create cloud desktops, you may be unable to create the cloud desktops. The system provides a queue mechanism. If a cloud desktop cannot be created within one hour, a message that indicates a creation failure appears in the EDS console. You can release the failed cloud desktop and create another cloud desktop. If you do not release the failed cloud desktop within seven days, the system reclaims the desktop. You are not charged for the failed cloud desktops.

What do I do if the "The price fails to be calculated. Refresh the page and try again" message appears?

If you want to use a RAM user, perform the following operations to resolve the issue:
  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. Find the required RAM user and view the policy of the account. If the RAM user does not have the AliyunBSSFullAccess permission, attach the policy that grants the permission to the RAM user. For more information, see Grant permissions to a RAM user.

    AliyunBSSFullAccess is the policy that grants all permissions in the Billing Management console. Users that have this policy are granted all permissions. This includes the permissions to purchase services and view consumption records.

Can multiple users share a cloud desktop?

A cloud desktop can be assigned to multiple users, but only one user can use the cloud desktop at a time. You can configure security policies for your cloud desktops to allow users to preemptively log on to cloud desktops to which other users are logged on. For more information, see Assign cloud desktops to regular users and view the regular users to whom the cloud desktops are assigned.

Can I migrate a cloud desktop from the China (Hangzhou) region to the China (Beijing) region?

No, you cannot migrate cloud desktops across regions.

Why is a regular user unable to see cloud desktops after the user logs on to the EDS client?

The regular user may not be assigned a cloud desktop. Perform the following operations to check whether the user is assigned a cloud desktop:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, click Cloud Desktops.
  4. Select User ID from the drop-down list, enter a user ID, and then click the search icon.

When a regular user installs applications on a cloud desktop, the system prompts the regular user to enter the administrator password. What do I do?

If a dialog box appears indicating that the administrator username and password are required, the account used by the regular user does not have the local administrator permissions on the cloud desktop. To resolve the issue, you can perform the following operations:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, click Cloud Desktops.
  4. On the Cloud Desktops page, find the required cloud desktop, click the More icon in the Actions column, and then click Send Remote Commands.
  5. Run the following commands based on the OS types of cloud desktops.
    • Windows cloud desktops
      Select PowerShell as the command type and run the following command:
       net localgroup administrators "ecd\Username" /add
    • Linux cloud desktops
      Select Shell as the command type and run the following command:
      #!/bin/bash 
      echo "ecd\\\\ Username ALL=(ALL) NOPASSWD:ALL #SET_BY_EDS" >> /etc/sudoers 
      Note Replace Username with the username of the regular user. The regular user can perform the following operations to contain the username: Log on to the cloud desktop and run the whoami command. In the command output, the string next to ecd\ is the username.
  6. Restart the cloud desktop.

What permissions can I configure for a policy?

You can use policies to control permissions on data transmission between clients and cloud desktops and permissions to use peripheral devices in cloud desktop sessions. The permissions include USB redirection, watermarking, local disk mapping, and clipboard use. This improves the security of cloud desktops. For more information, see Policy overview.

Do I need to restart a cloud desktop after I change the policy that is associated with the cloud desktop?

No, you do not need to restart the cloud desktop. The new policy immediately takes effect after you reconnect to the cloud desktop. For more information, see Modify a policy.

How can I manage the access from cloud desktops to specific domain names?

You can use policies to manage the access. You can add domain names to the blacklist and whitelist in a policy to limit the access of cloud desktops.
  • By default, if you do not configure the blacklist or whitelist, the cloud desktop can access all domain names.
  • If you add domain names to the blacklist, cloud desktops cannot access the domain names in the blacklist.
  • If you add domain names to the whitelist, cloud desktops can access only the domain names in the whitelist.
Note The blacklist and the whitelist are mutually exclusive. If you configure the blacklist and the whitelist at the same time, only the last list that you configure takes effect.

Can I use different policies for a cloud desktop that is shared by multiple regular users?

No, different policies cannot be used for a cloud desktop that is shared by multiple regular users. EDS supports access control at the desktop level. Access control at the user level is unavailable.

Can cloud desktops use ECS public images and custom images, or Alibaba Cloud Marketplace images?

No, cloud desktops cannot use Elastic Compute Service (ECS) public images and custom images, or Alibaba Cloud Marketplace images. Cloud desktops support only built-in system images and custom images that are created from the system images.

Can I replace the image of a cloud desktop?

The desktop template that is associated with a cloud desktop determines whether the image of the cloud desktop can be replaced.
  • If the cloud desktop is created based on a custom desktop template, you can perform the following operations to replace the image of the cloud desktop:
    1. Modify the desktop template and use a new image to replace the original image. For more information, see Modify a desktop template.
    2. Recreate the cloud desktop and replace the image of the original cloud desktop. For more information, see Recreate a cloud desktop.
  • If the cloud desktop is created based on the system desktop template, you cannot replace the image.

How long does it take to create a custom image?

You can create custom images based on an existing cloud desktop. It takes approximately 10 to 20 minutes to create a custom image based on the size of data stored in the cloud desktop.

Can I access EDS over IPsec-VPN from a data center?

No, you cannot use IPsec-VPN to access EDS from a data center. To access EDS from a data center, you must use SSL-VPN, Smart Access Gateway (SAG), or Express Connect.

What do I do if a cloud desktop is unable to access the Internet?

If you want to enable your cloud desktops to access the Internet, you must enable the Internet access feature for the workspace in which the cloud desktop is located. For more information, see Manage Internet access.
Note You can enable the Internet access feature for the latest version of workspaces whose IDs are in the <Region ID> + dir + <10-digit string> format. If your workspace is upgraded from a directory of an earlier version and the workspace ID is in the <Region ID> + dir + <17-character string consisting of letters and digits> format, you can configure an elastic IP address (EIP) or a network address translation (NAT) gateway to enable Internet access for your cloud desktop. For more information, see Configure an EIP and Configure a NAT gateway.