This topic provides answers to some commonly asked questions about Elastic Desktop Service (EDS) management for administrators.

What cloud desktop types are provided by EDS and how am I charged for cloud desktops?

The specifications of cloud desktops consist of computing resources and storage resources. Computing resources include vCPUs, memory, and GPUs. Storage resources include system disks and data disks. To meet different business requirements, EDS provides various cloud desktop types, such as General Office and Graphics. For more information, see Cloud desktop types.

You are charged for resources of different cloud desktop types. Cloud desktops support the subscription and pay-as-you-go billing methods. You are also charged for other resources, such as Active Directory (AD) connectors, network bandwidth, and Apsara File Storage NAS (NAS) file systems. For more information, see Overview.

Can I continue using cloud desktops if I have overdue payments in my account?

If your account balance, including cash and coupons, is insufficient to cover your payment, the payment becomes overdue. In this case, the use of cloud desktops is subject to your account system and the billing method of your cloud desktops. In most cases, you can continue using subscription cloud desktops even if you have overdue payments in your account. However, you may be unable to use pay-as-you-go cloud desktops. For more information, see Overdue payments.
Notice When an AD connector becomes unavailable due to overdue payments, all cloud desktops in the workspace that use the AD connector become unavailable.

Why is the user drop-down list empty when I create a cloud desktop?

If the user drop-down list is empty, no users exist. You can create convenience users and AD users based on your account type. For more information, see the following topics:

What do I do if I fail to create a cloud desktop?

When a large number of users are creating cloud desktops at the same time, you may fail to create a cloud desktop. The system provides a queuing mechanism. If the cloud desktop cannot be created within one hour, a message that indicates a creation failure appears in the EDS console. You can release the failed cloud desktop and create another cloud desktop. If you do not release the failed cloud desktop within seven days, the system reclaims the cloud desktop. You are not charged for the failed cloud desktop.

What do I do if the cloud desktop remains in the Registering state for a long period of time?

If the cloud desktop remains in the Registering state for a long period of time, you can fix the issue by using the following methods:
  • Recreate the cloud desktop after you stop it. For more information, see Change an image.
  • Use snapshots to restore the cloud desktop after you stop it. For more information, see Restore data.

What do I do if the "The price fails to be calculated. Refresh the page and try again" error message appears when I create a cloud desktop?

If you use a RAM user to create a cloud desktop, perform the following steps to fix the issue:
  1. Log on to the Resource Access Management (RAM) console by using your Alibaba Cloud account.
  2. Find the RAM user that you want to use and view the policy of the account. If the RAM user does not have the permissions that are defined in the AliyunBSSFullAccess policy, attach the policy to the RAM user. For more information, see Grant permissions to a RAM user.

    AliyunBSSFullAccess is the policy that defines all permissions on the Billing Management console. Users to which this policy is attached are granted all permissions, including the permissions to purchase services and view consumption records.

Can multiple users share a cloud desktop?

A cloud desktop can be assigned to multiple users. However, only one user can use the cloud desktop at a time. You can configure a security policy for a cloud desktop to control user access to the cloud desktop. For more information, see Assign cloud desktops to regular users and view the regular users.

Can I migrate a cloud desktop from the China (Hangzhou) region to the China (Beijing) region?

No, cloud desktops cannot be migrated from the China (Hangzhou) region to the China (Beijing) region. You cannot migrate cloud desktops across regions.

Why is a regular user unable to view cloud desktops after the regular user logs on to the EDS client?

The regular user may not be assigned a cloud desktop. Perform the following steps to check whether the regular user is assigned a cloud desktop:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Cloud Desktops > Desktops.
  4. Select User ID from the drop-down list, enter a user ID, and then click the search icon.

What do I do if the system prompts a regular user to enter the administrator password when the regular user installs applications on a cloud desktop?

If a dialog box that indicates the administrator username and password are required appears, the account that is used by the regular user does not have the local administrator permissions on the cloud desktop. To fix the issue, perform the following steps:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Cloud Desktops > Desktops.
  4. On the Cloud Desktops page, find the cloud desktop that you want to manage, click the More icon in the Actions column, and then click Send Remote Commands.
  5. Run the following commands based on the OS of the cloud desktop:
    • Windows cloud desktop
      Select PowerShell as the command type and run the following command:
       net localgroup administrators "ecd\Username" /add
    • Linux cloud desktop
      Select Shell as the command type and run the following command:
      #!/bin/bash 
      echo "ecd\\\\Username ALL=(ALL) NOPASSWD:ALL #SET_BY_EDS" >> /etc/sudoers 
      Note Replace Username with the username of the regular user. After the regular user logs on to the cloud desktop, you can run the whoami command. In the command output, the string next to ecd\ is the username.
  6. Restart the cloud desktop.

What permissions can I configure in a policy?

You can use policies to control permissions on data transmission and peripheral devices between clients and cloud desktops. This improves the security of cloud desktops. You can configure policies for features such as USB redirection, watermarking, local disk mapping, and clipboard use. For more information, see Policy overview.

Do I need to restart a cloud desktop after I change the policy that is associated with the cloud desktop?

No, you do not need to restart the cloud desktop. The new policy immediately takes effect after you reconnect to the cloud desktop. For more information, see Modify a policy.

How can I manage access from cloud desktops to specific domain names?

You can use policies to manage access to specific domain names. You can add domain names to the blacklist and whitelist of a policy for a cloud desktop.
  • If you do not configure a blacklist or whitelist, the cloud desktop can access all domain names.
  • If you configure a blacklist, cloud desktops cannot access the domain names in the blacklist.
  • If you configure a whitelist, cloud desktops can access only the domain names in the whitelist.
Note The blacklist and whitelist are mutually exclusive. If you configure the blacklist and the whitelist, only the most recent list that you configure takes effect.

Can I use different policies for a cloud desktop that is shared by multiple users?

No, you cannot use different policies for a cloud desktop that is shared by multiple users. EDS supports access control only for cloud desktops. EDS does not support access control for users.

Can cloud desktops use Elastic Compute Service (ECS) public images, custom images, or Alibaba Cloud Marketplace images?

No, cloud desktops cannot use ECS public images, custom images, and Alibaba Cloud Marketplace images. Cloud desktops support only built-in system images and custom images that are created from system images.

Can I change the image of a cloud desktop?

The desktop template that is associated with a cloud desktop determines whether the image of the cloud desktop can be changed. The following rules apply:
  • If the cloud desktop is created by using a custom desktop template, you can perform the following operations to change the image of the cloud desktop:
    1. Modify the desktop template and use a new image to replace the existing image. For more information, see Modify a desktop template.
    2. Recreate the cloud desktop and change the image of the original cloud desktop. For more information, see Change an image.
  • If the cloud desktop is created by using the system desktop template, you cannot change the image.

How long does it take to create a custom image for a cloud desktop?

The time that is required to create a custom image varies based on the size of the data that is stored in the cloud desktop and may range from 10 to 20 minutes.

Can I access EDS over IPsec-VPN from a data center?

No, you cannot access EDS over IPsec-VPN from a data center. To access EDS from a data center, you can use SSL-VPN, Smart Access Gateway (SAG), or Express Connect.

What do I do if my cloud desktop cannot access the Internet?

If you want a cloud desktop to access the Internet, you must enable Internet access for the workspace to which the cloud desktop belongs. For more information, see Manage Internet access.
Note You can enable Internet access only for the latest version of workspaces whose IDs are in the <Region ID>+dir+<10-digit string> format. If your workspace is upgraded from a directory of an earlier version and the workspace ID is in the <Region ID>+dir +<17-character string consisting of letters and digits> format, you can configure an elastic IP address (EIP) or a network address translation (NAT) gateway to enable Internet access for your cloud desktop. For more information, see Configure an EIP and Configure a NAT gateway.

Can I enable Internet access for workspaces in regions outside China?

Yes. However, you cannot use Internet access packages that are purchased from the China site to access the Internet in the China (Hong Kong) region and regions outside China. If you want to access the Internet in the China (Hong Kong) region and regions outside China, you must purchase Internet access packages from the International site. If cloud desktops in a workspace require Internet access and the Internet access package in the workspace is unavailable due to a region limit, we recommend that you use Cloud Enterprise Network (CEN) to connect to a virtual private cloud (VPC) of the workspace and create a NAT gateway or a proxy server.

What are the differences between cloud desktops and ECS instances?

Item Cloud desktop ECS instance
Concept EDS is a computing-based Desktop as a Service (DaaS) that is offered by Alibaba Cloud. EDS is easy to use and highly secure, and allows you to manage your cloud desktops in an efficient manner. ECS is a high-performance, stable, reliable, and scalable Infrastructure as a Service (IaaS) that is provided by Alibaba Cloud.
Scenario
  • Remote work
  • Multi-branch collaboration
  • Secure OA
  • Short-term usage
  • Graphic design
  • Real-time rendering for cloud games
  • Real-time rendering AI for augmented reality (AR) and virtual reality (VR) applications
  • Enterprise websites and lightweight web applications
  • Multimedia and high-concurrency applications or websites Startup websites that have low traffic and require only a low-configuration ECS instance to run web applications such as Apache and NGINX, host databases, and store files
  • Databases that have high I/O requirements, such as Online Transaction Processing (OLTP) and NoSQL databases
  • Applications or websites that may experience sharp traffic fluctuations, such as snatcher bots, coupon applications, e-commerce websites, and ticket-grabbing websites
  • Big data and real-time online and offline analysis
  • AI applications, such as applications of machine learning and deep learning
Host self-built websites on servers No supported Supported
Access the Internet You can only access the Internet from a cloud desktop. Supported
Security group control
  • Security group: EDS allows you to configure a security group to control inbound and outbound access to cloud desktops. This improves network security of cloud desktops.
  • Security group rule: A security group rule consists of attributes, such as the rule direction, priority, CIDR block, protocol type, port range, and authorization policy. For more information, see Configure a security group.
  • Rule direction: You can set the Rule Direction parameter to Inbound or Outbound to control inbound and outbound access to cloud desktops.
    Note By default, cloud desktops deny all inbound access requests and allow all outbound access requests.
    • Inbound: controls whether to allow requests that are destined for cloud desktops.
    • Outbound: controls whether to allow requests that originate from cloud desktops.
  • Security group: A security group acts as a virtual firewall to control inbound and outbound traffic of ECS instances that are associated with the security group to improve security.
  • Security group rule: A security group rule consists of attributes, such as the access rule, priority, CIDR block, protocol type, port range, and authorization policy. For more information, see Overview.
  • Access rule: You can associate inbound and outbound rules with ECS instances to control inbound and outbound access to the ECS instances.
    Note By default, ECS instances allow all outbound access requests.
    • Inbound: controls whether to allow requests that are destined for ECS instances.
    • Outbound: controls whether to allow requests that originate from ECS instances.

Why am I unable to access a cloud desktop after I enable the firewall?

If you enable the firewall in your actual business scenarios, traffic over specific ports is not allowed. You are unable to log on to the client and connect to your cloud desktop. In this case, you must open or connect to the ports after you enable the firewall to ensure that your business can run as expected. For more information about ports, see Manage Internet access.

Why are regular users unable to use the USB devices that are connected to local computers from their cloud desktops?

Perform the following steps to troubleshoot the error:
  1. Check whether the USB redirection feature is enabled. For more information, see USB redirection.
  2. Check whether the printer redirection feature and the webcam redirection feature are enabled. For more information, see Configure a basic policy.
    Note The operation is required only if you want to allow regular users to use USB printers or webcams that are connected to local computers from cloud desktops.
  3. Check whether the drivers required for USB devices are installed.
    Note The operation is required only if you want to allow regular users to use USBKeys that are connected to local computers from cloud desktops.
    Warning If cloud desktops run the Windows OS, do not install drivers in the temp directory.
  4. Check whether the USB policy takes effect.

    Perform the following operations: Click Preferences at the top of a cloud desktop, and then click Devices. Check whether the USB policy takes effect, or whether the configurations of the USB device meet your business requirements.

How do I update the OS of a Windows cloud desktop?

To update the OS of a Windows cloud desktop, perform the following steps:
Note Make sure that the system snapshot is backed up before you update the OS of a Windows cloud desktop.
  1. Press the Win+R shortcut key and enter the cmd in the Run window.
  2. In the command prompt window, run the following command:
    sc.exe config "wuauserv" start=demand
  3. After the success message appears, run the following command:
    sc.exe start wuauserv

Why is the double-screen mode not supported by cloud desktops?

The EDS team is working on the issue. For more information, see Failure of entering the double-screen mode when a regular user uses a cloud desktop.