Elastic Desktop Service (Enterprise Edition) supports the following account types: convenience account type and enterprise Active Directory (AD) account type. When you create office networks (formerly workspaces), you can specify their account types. This topic describes how to create an office network of the convenience account type (hereinafter referred to as a convenience office network).
Create a basic office network
Basic office networks are configured with basic settings and can be used out of the box. If you want to use Elastic Desktop Service (Enterprise Edition) or require no more than 50 cloud computers, you can create a basic office network. If you want to learn about the differences between basic office networks and advanced office networks, see the "Office network types" section of the Office network types topic.
Log on to the Elastic Desktop Service console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click Create Office Network.
In the Create Office Network panel, select a region, enter a name for the office network that you want to create, select Basic Office Network, and then click OK.
Create an advanced office network
Advanced office networks are configured with advanced settings and provide various features. If you want to configure advanced settings or require more than 50 cloud computers, you can create an advanced office network.
Log on to the Elastic Desktop Service console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click Create Office Network.
In the Create Office Network panel, select Advanced Office Network, configure parameters as prompted, and then click Next: Configure Account System. The following table describes the parameters.
In the Account Type section, select Convenience Account and click OK.
Implement connectivity between cloud computers in an office network
Cloud computers in an office network are also isolated. To implement connectivity, you can turn on Interconnection Between Cloud Computers in Office Network on the details page of the office network.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click the ID of the office network that you created in the previous section to go to the details page.
In the Network section of the details page, turn on Interconnection Between Cloud Computers in Office Network.
Manage permissions on Internet access for cloud computers
By default, the cloud computers in an office network can access the Internet by using the free bandwidth. You can perform the following steps to manage the permissions on Internet access for cloud computers:
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click the ID of the office network that you created in the previous section to go to the details page.
In the Bandwidth section of the details page, choose an Internet access policy based on your business requirements:
Select Allow all cloud computers to access the Internet. You can configure a list of cloud computers that are not allowed to access the Internet. If you want to specify a list of cloud computers that are not allowed to access the Internet, click Add and specify cloud computers.
Select Do not allow access to the Internet. You can configure a list of cloud computers that are allowed to access the Internet. If you want to specify a list of cloud computers that are allowed to access the Internet, click Add and specify cloud computers.
Configure authentication
To ensure the security of logons, you can enable single sign-on (SSO) and other authentication for office networks. The following authentication methods are supported:
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click the ID of the office network that you created in the previous section to go to the details page.
In the Other section of the details page, click Show in the upper-right corner and turn on or off the following switches to configure authentication:
SSO: You must configure a trust relationship between an identity provider (IdP), such as Active Directory Federation Service (AD FS) and a service provider (SP), such as Elastic Desktop Service (Enterprise Edition) . When end users log on to Alibaba Cloud Workspace clients, the system authenticates only the IdP logon credentials of the end users. If the credentials pass authentication, the end users can log on to Alibaba Cloud Workspace clients. For more information, see Overview.
MFA: You must bind a virtual multiple-factor authentication (MFA) device that dynamically generates code when the device receives an authentication request. When end users log on to Alibaba Cloud Workspace clients by using office network IDs, usernames, and passwords, the end users must also enter a dynamic code. For more information, see Configure MFA.
Client Logon Verification: End users must enter a verification code that the system sends to their email addresses or mobile phones when the end users use new devices to log on to Alibaba Cloud Workspace clients.
NoteMulti-factor authentication (MFA), single sign-on (SSO), and Client Logon Verification are mutually exclusive. You can turn on only one of them for an office network.
View basic information
You can view basic information about an office network on its details page.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, click the ID of the office network that you created in the previous section to go to the details page.
In the Basic Information section of the details page, you can view the following information:
Name
ID
Type
Status
Creation time
Region
Number of cloud computers
Number of users
Unlock an office network
If you do not create cloud computers in a convenience office network for 15 consecutive days, the office network is locked and its VPC resources are automatically released. If you want to use the locked office network, perform the following steps.
The system does not lock office networks that meet the following conditions:
The office networks are attached to CEN instances.
The office networks are configured with enterprise private networks. That is, office networks whose Connection Method is set to VPC.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, find the desired office network and click Unlock in the Status column.
In the message that appears, click Unlock.
NoteIf you fail to unlock the office network, submit a ticket to obtain Alibaba Cloud technical support.
Delete an office network
You can delete office networks in which all cloud computers are released.
Before you delete an office network, make sure that you backed up important resources and data of cloud computers. You cannot restore deleted cloud computers. Proceed with caution.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Network (Formerly Workspace) page, find the desired office network and click Delete in the Actions column.
In the message that appears, read the message and click OK.
What to do next
After you create an office network, you can perform the following operations:
FAQ
Why am I unable to receive a verification code when I choose a CEN instance from another Alibaba Cloud account?
You did not specify a method for receiving notifications, or the contact information that you specified was invalid. Perform the following steps to check the notification method and contact information:
Log on to the Elastic Desktop Service console.
In the top navigation bar, click the
icon to go to Message Center. In the left-side navigation pane, choose .
On the Common Settings page, check whether notification methods that corresponds to the Notifications Regarding the Creation and Activation of Product Instances parameter are selected and whether the contact information is valid.