This topic provides answers to some frequently asked questions about Elastic Desktop Service (EDS) management for administrators.

What cloud desktop types are provided by EDS and how am I charged for cloud desktops?

The specifications of cloud desktops consist of computing resources and storage resources. Computing resources include vCPUs, memory, and GPUs. Storage resources include system disks and data disks. To meet different business requirements, Alibaba Cloud EDS provides a variety of cloud desktop types, such as General Office and Graphics. For more information, see Cloud desktop types.

You are charged for resources of different cloud desktop types. Cloud desktops support the subscription and pay-as-you-go billing methods. You are also charged for other resources, such as Active Directory (AD) connectors, network bandwidth, and Apsara File Storage NAS (NAS) file systems. For more information, see Billing overview.

Can I continue to use cloud desktops even if I have overdue payments within my account?

If your account balance, including cash and coupons, is insufficient to cover your payment, the payment becomes overdue. In this case, the use of cloud desktops becomes subject to your account system and the billing method of your cloud desktops. In most cases, you can continue to use subscription cloud desktops even if you have overdue payments within your account. However, maybe you are unable to use pay-as-you-go cloud desktops. For more information, see Overdue payments.
Notice When an AD connector becomes unavailable due to overdue payments, all cloud desktops in a workspace become unavailable.

Why am I unable to select users when I create a cloud desktop?

If the user drop-down list is empty, no users exist. You can create users by using one of the following methods based on your account type:

What do I do if I fail to create a cloud desktop?

If a large number of users create cloud desktops at the same time, you may fail to create a cloud desktop. The system provides a queue mechanism. If the cloud desktop cannot be created within one hour, a message that indicates a creation failure appears in the EDS console. You can release the failed cloud desktop and create another cloud desktop. If you do not release the failed cloud desktop within seven days, the system reclaims the cloud desktop. You are not charged for the failed cloud desktop.

What do I do if the cloud desktop keeps in the Registering state for a long period of time?

If the cloud desktop keeps in the Registering state for a long period of time, you can resolve the issue by using the following methods:
  • Recreate the cloud desktop after you stop it. For more information, see Recreate a cloud desktop.
  • Use snapshots to restore the cloud desktop after you stop it. For more information, see Restore data.

What do I do if the "The price fails to be calculated. Refresh the page and try again" message appears when I create a cloud desktop?

If you want to use a RAM user to create a cloud desktop, perform the following operations to resolve the issue:
  1. Log on to the Resource Access Management (RAM) console by using your Alibaba Cloud account.
  2. Find the RAM user that you want to use and view the policy of the account. If the RAM user does not have the permissions that the AliyunBSSFullAccess policy grants, attach the policy to the RAM user. For more information, see Grant permissions to a RAM user.

    AliyunBSSFullAccess is the policy that grants all permissions on the Billing Management console. Users that are attached to the policy are granted all the permissions, including the permissions to purchase services and view consumption records.

Can multiple users share a cloud desktop?

A cloud desktop can be assigned to multiple users. However, only one user can use the cloud desktop at a time. You can configure security policies for your cloud desktop to allow whether multiple users can log on to the same cloud desktop. For more information, see Assign cloud desktops to regular users and view the regular users.

Can I migrate a cloud desktop from the China (Hangzhou) region to the China (Beijing) region?

No. You cannot migrate cloud desktops across regions.

Why is a regular user unable to view cloud desktops after the regular user logs on to the EDS client?

The regular user may not be assigned a cloud desktop. Perform the following operations to check whether the regular user is assigned a cloud desktop:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Cloud Desktops > Desktops.
  4. Select User ID from the drop-down list, enter a user ID, and then click the search icon.

What do I do if the system prompts a regular user to enter the administrator password when the regular user installs applications on a cloud desktop?

If a dialog box that indicates the administrator username and password are required appears, the account that is used by the regular user does not have the local administrator permissions on the cloud desktop. To resolve the issue, perform the following operations:
  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Cloud Desktops > Desktops.
  4. On the Cloud Desktops page, find the cloud desktop that you want to manage, click the More icon in the Actions column, and then click Send Remote Commands.
  5. Run the following commands based on the OS type of the cloud desktop.
    • Windows cloud desktop
      Select PowerShell as the command type and run the following command:
       net localgroup administrators "ecd\Username" /add
    • Linux cloud desktop
      Select Shell as the command type and run the following command:
      #!/bin/bash 
      echo "ecd\\\\Username ALL=(ALL) NOPASSWD:ALL #SET_BY_EDS" >> /etc/sudoers 
      Note Replace Username with the username of the regular user. After the regular user logs on to the cloud desktop, you can run the whoami command. In the command output, the string next to ecd\ is the username.
  6. Restart the cloud desktop.

What permissions can I configure in a policy?

You can use policies to control permissions on data transmission and peripheral devices between clients and cloud desktops. This way, the security of cloud desktops is improved. The permissions include USB redirection, watermarking, local disk mapping, and clipboard use. For more information, see Policy overview.

Do I need to restart a cloud desktop after I change the policy that is associated with the cloud desktop?

No, you do not need to restart the cloud desktop. The new policy immediately takes effect after you reconnect to the cloud desktop. For more information, see Modify a policy.

How can I manage the access from cloud desktops to specific domain names?

You can use policies to manage access to specific domain names. You can add domain names to the blacklist and whitelist in the policy for a cloud desktop.
  • By default, if you do not configure the blacklist or whitelist, the cloud desktop can access all domain names.
  • If you add domain names to the blacklist, cloud desktops cannot access the domain names.
  • If you add domain names to the whitelist, cloud desktops can access only the domain names.
Note The blacklist and whitelist are mutually exclusive. If you configure the blacklist and the whitelist both, only the most recent list that you configure takes effect.

Can I use different policies for a cloud desktop that is shared by multiple users?

No. EDS supports access control only for cloud desktops. Access control for users is unavailable.

Can cloud desktops use Elastic Compute Service (ECS) public images, custom images, or Alibaba Cloud Marketplace images?

No. Cloud desktops support only built-in system images and custom images that are created from system images.

Can I change the image of a cloud desktop?

The desktop template that is associated with a cloud desktop determines whether the image of the cloud desktop can be changed. Take note of the following items:
  • If the cloud desktop is created based on a custom desktop template, you can perform the following operations to change the image of the cloud desktop:
    1. Modify the desktop template and use a new image to replace the existing image. For more information, see Modify a desktop template.
    2. Recreate the cloud desktop and change the image of the original cloud desktop. For more information, see Recreate a cloud desktop.
  • If the cloud desktop is created based on the system desktop template, you cannot change the image.

How long does it take to create a custom image for a cloud desktop?

The time required to create a custom image varies based on the size of the data that is stored in the cloud desktop and may range from 10 to 20 minutes.

Can I access EDS over IPsec-VPN from a data center?

No. To access EDS from a data center, you can use SSL-VPN, Smart Access Gateway (SAG), or Express Connect.

What do I do if my cloud desktop cannot access the Internet?

If you want to use your cloud desktop to access the Internet, you must enable Internet access for the workspace to which the cloud desktop belongs. For more information, see Manage Internet access.
Note You can enable Internet access for the latest version of workspaces whose IDs are in the <Region ID>+dir+<10-digit string> format. If your workspace is upgraded from a directory of an earlier version and the workspace ID is in the <Region ID>+dir +<17-character string consisting of letters and digits> format, you can configure an elastic IP address (EIP) or a network address translation (NAT) gateway to enable Internet access for your cloud desktop. For more information, see Configure an EIP and Configure a NAT gateway.

Can I enable Internet access for workspaces in regions outside China?

You cannot use Internet access packages purchased from the China site to access the Internet in the China (Hong Kong) region and regions outside China. If you want to access the Internet in the China (Hong Kong) region and regions outside China, you need to purchase Internet access packages only from the International site. If cloud desktops in a workspace need to access the Internet and you cannot purchase an Internet access package for the workspace, we recommend that you use Cloud Enterprise Network (CEN) to connect to virtual private clouds (VPCs) and create NAT gateways or proxy servers.