Elastic Desktop Service (EDS) organizes cloud computers into office networks (formerly workspaces) that define networking, authentication, and access policies. A convenience office network uses convenience accounts for simplified user management without Active Directory (AD) infrastructure. EDS also supports enterprise AD accounts.
Create a basic office network
Basic office networks use default settings and work out of the box. Create one to try EDS or when you need no more than 50 cloud computers. For differences between basic and advanced office networks, see the "Office network types" section of Overview.
Log on to the Elastic Desktop Service Enterprise console.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, click Create Office Network.
In the Create Office Network panel, select a region, enter a name, select Basic Office Network, and then click OK.
Create an advanced office network
Advanced office networks provide additional configuration options. Create one when you need advanced settings or more than 50 cloud computers.
Log on to the Elastic Desktop Service Enterprise console.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, click Create Office Network.
In the Create Office Network step, select Advanced Office Network, configure the following parameters, and then click Next: Configure Account System.
NoteA VPC connection depends on PrivateLink, which is free of charge. If you select VPC or Internet and VPC, the system automatically activates PrivateLink.
In the Configure Account System step, select Convenience Account in the Account Type section, and then click OK.
Enable cloud computer interconnection
By default, cloud computers within the same office network cannot access each other. Enable interconnectivity to allow communication between cloud computers.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the target office network and click its ID.
In the Network Information section of the details page, turn on Interconnectivity.
Manage Internet access for cloud computers
By default, cloud computers access the Internet through the free basic bandwidth plan. Configure access control policies to manage Internet access per cloud computer.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the target office network and click its ID.
In the Public Bandwidth section of the details page, select an Internet Access Control policy:
Allow all cloud computers to access the Internet. You can configure a list of cloud computers that are not allowed to access the Internet: To deny specific cloud computers, click Add and select the cloud computers.
Do not allow access to the Internet. You can configure a list of cloud computers that are allowed to access the Internet: To allow specific cloud computers, click Add in the Allow Internet Access section and select the cloud computers.
Configure logon authentication
Strengthen end user logon security by configuring one of the following authentication methods in the Other Information section of the office network details page.
MFA, SSO, and Client Logon Verification are mutually exclusive. Enable only one per office network.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the target office network and click its ID.
In the Other Information section of the details page, turn on or turn off one of the following:
SSO Settings: Configure mutual trust between an identity provider (IdP), such as Active Directory Federation Services (AD FS), and a service provider (SP), such as WUYING Workspace. End users then log on to a WUYING Terminal by authenticating through the IdP. For more information, see Overview.
Multi-factor authentication: End users must enter a dynamic verification code from a virtual MFA device in addition to their username and password when logging on with an office network ID (formerly workspace ID). For more information, see Configure MFA for logon.
Client logon verification: End users must complete a CAPTCHA verification when logging on from a new device.
View office network details
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the target office network and click its ID.
In the Basic Information section of the details page, view the following fields: Name, ID, Type, Created At, Instances, Region, and Status.
Unlock a locked office network
If no cloud computers are created in a convenience office network for 15 consecutive days, the office network is locked and its VPC resources are automatically released. If you want to use the locked office network, perform the following steps to unlock it.
The system does not lock office networks that meet either of the following conditions:
The office network is attached to a CEN instance.
The Connection Method is set to VPC.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the locked office network and click Unlock in the Status column.
In the confirmation message, click OK.
If you fail to unlock the office network, submit a ticket to contact Alibaba Cloud technical support.
Delete an office network
You can delete an office network only after all cloud computers in it are released.
Before deleting an office network, back up all important resources and data. Deleted office networks cannot be restored.
In the left-side navigation pane, choose Networks & Storage > Office Networks.
In the top navigation bar, select a region.
On the Office Networks page, find the target office network and click Delete in the Actions column.
In the confirmation message, read the details and click OK.
What to do next
After creating an office network, you can perform the following operations:
Troubleshooting
Unable to receive a verification code when selecting a CEN instance from another Alibaba Cloud account
This issue occurs when no notification method is configured or the contact information is invalid. Verify your notification settings:
Log on to the Elastic Desktop Service Enterprise console.
In the top navigation bar, click the notification icon to go to the Message Center console.
In the left-side navigation pane, choose Message Settings > Common Settings.
On the Common Settings page, verify that notification methods for Notifications Regarding the Creation and Activation of Product Instances are selected and that the contact information is valid.