Cloud desktops are deployed inside workspaces. Inside a workspace, you can configure cloud desktop settings such as secure office networks, user account systems, and Internet access. User account systems are classified into enterprise Active Directory (AD) accounts and convenience accounts. Convenience accounts are dedicated user accounts for EDS and are suitable for scenarios in which AD is not required. This topic describes how to create a workspace of the convenience account type.
A workspace in which cloud desktops are deployed is a collection of environment configurations. For more information, see Workspace overview.
- Log on to the EDS console.
- In the left-side navigation pane, click Overview.
- On the Overview page, click Create workspace.
- In the Configure Secure Office Network step, select a region, enter a workspace name, and then specify an IPv4 CIDR block. Click Next: Configure Account System.
The following table describes the parameters.
Parameter Description Select region The region in which you want to create a workspace. For more information about the available regions and limits, see Regions. Workspace name The name of the workspace. We recommend that you use an identifiable name to facilitate future management. The naming conventions are described in the parameter field. IPv4 CIDR block The IPv4 CIDR block that the system uses to create a virtual private cloud (VPC). We recommend that you specify the IPv4 CIDR block as 10.0.0.0/12, 172.16.0.0/12, 192.168.0.0/16, or a subnet of these CIDR blocks. If you specify an IPv4 CIDR block of 10.0.0.0/12 or 172.16.0.0/12, the mask is 12 to 24 bits in length. If you specify an IPv4 CIDR block of 192.168.0.0/16, the mask is 16 to 24 bits in length.Note When you create a cloud desktop in the workspace, the system assigns IP addresses from the specified CIDR block to the cloud desktop. Specify an appropriate CIDR block based on your business requirements, and make sure that the number of available IP addresses in the CIDR block can meet the requirements for creating cloud desktops. The greater the value of the mask length, the fewer the number of IP addresses contained in the workspace, and the less cloud desktops that can be created in the workspace. If you want to join the workspace to a Cloud Enterprise Network (CEN) instance, you must specify an appropriate CIDR block to avoid CIDR block conflicts between the workspace and other network instances in the CEN instance. Connection Method The connection method for the cloud desktop. Valid values:
Note The VPC connection method is provided based on Alibaba Cloud PrivateLink, which is free of charge. If you set Connection Method to VPC or Internet and VPC, PrivateLink is automatically activated.
- Internet: allows clients to connect to cloud desktops only over the Internet.
- VPC: allows clients to connect to cloud desktops only over VPCs.
- Internet and VPC: allow connections over both the Internet and VPCs. You can select a connection method when you use a client to connect to a cloud desktop.
Cloud Enterprise Network Specifies whether to join the workspace to a CEN instance. If you select Join, enter a CEN instance ID. For more information, see Attach a secure office network to or detach a secure office network from a CEN instance.Note If you want to connect to your cloud desktops over VPCs, you must select Join. When the on-premises network connects to the cloud over Smart Access Gateway (SAG), Express Connect, or VPN Gateway, ensure that the VPCs must be associated with same CEN instance. Local Administrator Specifies whether to grant the local administrator permissions to a regular user. If you select Local Administrator, the regular user to which the cloud desktop created in the workspace is assigned has different permissions based on the operating system of the cloud desktop.
- For Windows cloud desktops, the regular user has the permissions of the local administrator.
- For Linux cloud desktops, the regular user has the permissions to run all commands. Regular users are not prompted for the password when they use sudo to run commands.
- In the Configure Account System step, set Account Type to Convenience account.
- Enable and configure Internet access based on your business requirements.
Note You can also enable and configure Internet access after the workspace is created. For more information, see Manage Internet access.
- If you do not need to enable Internet access, click Create a workspace immediately without public network services.
- If you need to enable Internet access, click Next: Access Public Network Settings. On the Configure Access to the Internet page, complete the configurations.
- Select Open public network access for desktop.
- Specify the maximum bandwidth value.
- Click Create workspace now.