Cloud desktops in Elastic Desktop Service (EDS) are deployed in workspaces. In a workspace, you can configure cloud desktop settings such as secure office networks, user account systems, and Internet access. User accounts are classified into convenience accounts and enterprise Active Directory (AD) accounts. To create enterprise AD accounts, you must connect to enterprise AD systems. This topic describes how to connect to an enterprise AD system and create a workspace of the enterprise AD account type.
Prerequisites
- An enterprise AD system is created.
Note
- If you deploy an AD domain controller and a Domain Name System (DNS) server on the same server, make sure that the DNS address of this server is set to 127.0.0.1.
- If you deploy an AD domain controller and a DNS server on different servers, make sure that the DNS address of the AD domain controller is set to the IP address of the DNS server.
- A Cloud Enterprise Network (CEN) instance is created. The network of the enterprise
AD system is attached to the CEN instance. For more information, see Create a CEN instance and Attach a network instance.
Notice When you create a workspace, you must specify a secure office network. When you connect to the enterprise AD system, make sure that the private network of the enterprise AD system is connected to the secure office network over CEN. If you deploy an AD domain controller and DNS server in a data center, you must connect on-premises networks to off-premises networks by using Smart Access Gateway (SAG), Express Connect, or VPN Gateway.
Background information
A workspace in which cloud desktops are deployed is a collection of environment configurations. For more information, see Workspace overview.
- Step 1: Create a workspace
- In the EDS console, create a workspace of the enterprise AD account type.
- In the Elastic Compute Service (ECS) console, configure rules for a security group.
- Step 2: Configure an AD domain
- Configure a conditional forwarder on the DNS server.
- Configure a trust relationship on the AD domain controller.
- In the EDS console, enter the trust password and select an organizational unit (OU).
Step 1: Create a workspace
Step 2: Configure an AD domain
Results
- On the Overview page of the EDS console, find the AD workspace that you created, click the workspace ID to go to the workspace details page, and then check whether the workspace is in the Registered status.
- On the Secure Office Network page of the EDS console, find the network of the workspace and check whether the network is in the Registered state.
Troubleshooting
- If you want to clear resource records from the DNS server cache, run the following
command:
Clear-DnsServerCache -Force
- If you want to clear the contents of the DNS client cache, run the following command:
Clear-DnsClientCache