Policies control access settings and behavioral configurations for Alibaba Cloud Workspace desktop clients and cloud computers. Two policy types are available: administrator-set policies configured centrally through the console, and custom policies that end users can configure on the client under conditions set by the administrator.
This topic uses the macOS client V7.13 and the Enterprise Edition as examples. If your experience differs, you may be using a different client or an outdated version. Upgrade to the latest version.
This topic uses the macOS client V7.13 and the Enterprise Edition as examples. If your experience differs, you may be using a different client or an outdated version. Upgrade to the latest version.
Administrator-set policies control terminal access and DesktopAssistant behavior. Only Enterprise Edition administrators can configure these policies, and end users cannot modify them on the client. For these configurations, see Administrator-set policies.
Custom policies allow end users to configure scheduled tasks, such as automatic shutdown or hibernation after disconnection. These policies require prior setup by the administrator.
Administrator-set policies
Only an Enterprise Edition administrator can configure administrator-set policies. The configuration applies centrally from the console, and end users cannot modify these policies on the client. Administrator-set policies include the Alibaba Cloud Workspace terminal access policy and the cloud computer DesktopAssistant management policy.
Configure the terminal access policy
The Alibaba Cloud Workspace terminal access policy defines which types of Alibaba Cloud Workspace terminals an end user account can log on to.
Enterprise Edition administrator configuration path
Log on to the EDS enterprise console.
Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M Management > Policy.
In the top navigation bar, select a region.
On the Policypage, find the policy associated with the Cloud Computer, and then, in the Actionscolumn, click Modify Policy.
If the cloud computer is currently associated with the system policy
system-all-enabled-policy, that system policy cannot be modified. The administrator must create a custom policy in theEDS Enterprise Editionconsole and then associate that custom policy with the cloud computer.For detailed instructions, see Create a custom policyandChange an associated policy.On the Modify Policypage, choose Security>User Logon Controlin the left-side navigation pane. Then, to the right of Logon Method Control, select the terminal types that end users are allowed to log on from.
Configure the DesktopAssistant management policy
The cloud computer DesktopAssistant management policy defines whether the menu panel of the cloud computer DesktopAssistant displays specific feature entries.
Enterprise Edition administrator configuration path
Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M Management > Policy.
In the top navigation bar, select a region.
On the Policy page, find the policy associated with the cloud computer. In the Actions column, click Modify Policy.
NoteThe
system-all-enabled-policysystem policy cannot be modified. If the cloud computer is associated with this policy, you must create a custom policy in the Elastic Desktop Service Enterprise Edition console and then associate it with the cloud computer. For more information, see Create a custom policy and Change an associated policy.On the Modify Policy page, click DesktopAssistant Management in the left-side navigation pane. In the Desktop Client section, enable or disable the features.
Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M Management > Policy.
In the top navigation bar, select a region.
On the Policy page, find the policy associated with the cloud computer. In the Actions column, click Modify Policy.
The system-all-enabled-policy system policy cannot be modified. If the cloud computer is associated with this policy, you must create a custom policy in the Elastic Desktop Service Enterprise Edition console and then associate it with the cloud computer. For more information, see Create a custom policy and Change an associated policy.
On the Modify Policy page, click DesktopAssistant Management in the left-side navigation pane. In the Desktop Client section, enable or disable the features.
## Custom policies
Unlike administrator-set policies that are configured centrally and cannot be changed by end users, custom policies allow end users to modify specific settings on the client under conditions defined by the administrator. Currently, the only available custom policy is the Scheduled Task Policy.
Scheduled Task Policy
After a cloud computer is disconnected, it stays powered on by default. For pay-as-you-go cloud computers, this can result in unnecessary charges. You can configure a Scheduled Task Policy to automatically shut down or hibernate the cloud computer after a specified disconnection duration.
Prerequisites
You are logged on to theWindows clientormacOS client(V6.2 or later).
An administrator has enabled Scheduled Task upon Disconnectionin the scheduled task associated with the cloud computer and set the Effective Ruleto Task Configured by End User.
Administrator setup
The following steps describe what your administrator must configure before you can use the Scheduled Task Policy. These steps are performed in the console by the administrator and are provided here for reference.
Log on to the EDS enterprise console.
Log on to the EDS enterprise console.
In the left-side navigation pane, choose O&M Management > Scheduled Tasks.
On the Scheduled Taskspage, find the scheduled task associated with the Cloud Computer, and then, in the Actionscolumn, click Modify.
If the cloud computer is not associated with any scheduled task yet, the administrator must create a scheduled task in theEDS Enterprise Editionconsole and then associate that scheduled task with the cloud computer.For detailed instructions, see Configure scheduled tasks.
At the bottom of the Edit Scheduled Taskpage, turn on the Scheduled Task upon Disconnectionswitch, and set the Effective Ruleto Task Configured by End User.
Procedure
On the cloud computer card, click Manage, and then click Policies.
In the Scheduled Task Policy area, turn on the Scheduled action on disconnection switch, select the disconnection duration, and set the action to Shut Down or Hibernate.
The Scheduled action on disconnection switch is turned on and your selected duration and action are displayed in the Scheduled Task Policy area.
Shutting down a cloud computer can terminate running processes and cause unsaved files and data to be lost. Save any unsaved data files on the cloud computer as soon as you receive the shutdown notification.
If the settings in the Scheduled Task Policy area are read-only, the cloud computer might not be associated with a scheduled task, or the Effective Rule of the associated scheduled task is set to Task Configured by Administrator. Contact your administrator to verify the configuration.
Rules for when policy changes take effect
If you change the execution time of this policy while the cloud computer is running, the elapsed execution time counted for the previous policy resets to zero.
If the current cloud computer is assigned to multiple users, all of these users can configure the Scheduled Task Policy, but the settings saved last take effect.
If another user changes the policy that you configured, you receive a notification. To view it, click the icon in the upper-right corner of the desktop client.