Elastic Desktop Service (EDS) supports convenience accounts and enterprise Active Directory (AD) accounts. When you create office networks (formerly workspaces), you can specify their account types. This topic describes how to create an office network of the convenience account type (hereinafter referred to as a convenience office network).
Create a basic office network
Basic office networks are configured with basic settings and can be used out of the box. If you want to try EDS or want to create no more than 50 cloud computers, create a basic office network. If you want to learn about the differences between basic office networks and advanced office networks, see the "Office network types" section of the Overview topic.
Log on to the EDS console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, click Create Office Network.
In the Create Office Network panel, select a region, enter a name for the office network that you want to create, select Basic Office Network, and then click OK.
Create an advanced office network
Advanced office networks are configured with advanced settings and provide various features. If you want to configure advanced settings or require more than 50 cloud computers, create an advanced office network.
Log on to the EDS console.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, click Create Office Network.
In the Create Office Network panel, select Advanced Office Network, configure parameters as prompted, and then click Next: Configure Account System. The following table describes the parameters.
In the Account Type section, select Convenience Account and click OK.
Connect to cloud computers in an office network
Cloud computers in an office network are also isolated. To implement connectivity, you can turn on Interconnection Between Cloud Computers in Office Network on the details page of the office network.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the office network that you want to manage and click its ID.
In the Network section of the details page, turn on Interconnectivity.
Manage permissions on Internet access for cloud computers
By default, the cloud computers in an office network can access the Internet by using the basic bandwidth plan, which is free of charge. You can perform the following steps to manage the permissions on Internet access for cloud computers:
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the office network that you want to manage and click its ID.
In the Bandwidth section of the details page, choose an Internet access control policy based on your business requirements:
Select Allow all cloud computers to access the Internet. You can configure a list of cloud computers that are not allowed to access the Internet. If you want to specify a list of cloud computers that are not allowed to access the Internet, click Add and specify cloud computers.
Select Do not allow access to the Internet. You can configure a list of cloud computers that are allowed to access the Internet. If you want to specify a list of cloud computers that are allowed to access the Internet, click Add and specify cloud computers.
Configure logon methods and authentication
To ensure the security of logons, you can enable single sign-on (SSO) and other authentication for office networks. The following authentication methods are supported:
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the office network that you want to manage and click its ID.
In the Other Information section of the office network details page, turn on or off the following switches based on your business requirements:
SSO: You must configure a trust relationship between an identity provider (IdP), such as Active Directory Federation Service (AD FS) and a service provider (SP), such as Elastic Desktop Service (Enterprise Edition) . When end users log on to Alibaba Cloud Workspace clients, the system authenticates only the IdP logon credentials of the end users. If the credentials pass authentication, the end users can log on to Alibaba Cloud Workspace clients. For more information, see Overview.
MFA: You must bind a virtual multiple-factor authentication (MFA) device that dynamically generates code when the device receives an authentication request. When end users log on to Alibaba Cloud Workspace clients by using office network IDs, usernames, and passwords, the end users must also enter a dynamic code. For more information, see Configure MFA.
Client Logon Verification: End users must enter a verification code that the system sends to their email addresses or mobile phones when the end users use new devices to log on to Alibaba Cloud Workspace clients.
NoteMulti-factor authentication (MFA), single sign-on (SSO), and Client Logon Verification are mutually exclusive. You can turn on only one of them for an office network.
View basic information
You can view basic information about an office network on its details page.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the office network that you want to manage and click its ID.
In the Basic Information section of the office network details page, you can view the following parameters:
Name
ID
Type
Status
Created At
Region
Cloud Computers
Users
Unlock an office network
If you do not create cloud computers in a convenience office network for 15 consecutive days, the office network is locked, and its VPC resources are automatically released. If you want to use the locked office network, perform the following steps.
The system does not lock office networks that meet the following conditions:
Office networks that are attached to CEN instances.
Office networks that are configured with enterprise private networks. That is, office networks whose Connection Method is set to VPC.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the locked office network that you want to manage and click Unlock in the Status column.
In the message that appears, click OK.
NoteIf you fail to unlock the office network, submit a ticket to contact Alibaba Cloud technical support.
Delete an office network
You can delete office networks in which all cloud computers are released.
Before you delete an office network, make sure that you have backed up important resources and data of cloud computers. You cannot restore deleted cloud computers. Proceed with caution.
In the left-side navigation pane, choose .
In the upper-left corner of the top navigation bar, select a region.
On the Office Networks page, find the office network that you want to delete and click Delete in the Actions column.
In the message that appears, read the message and click OK.
What to do next
After you create an office network, you can perform the following operations:
Troubleshooting
Why am I unable to receive a verification code when I choose a CEN instance from another Alibaba Cloud account?
You did not specify a method for receiving notifications, or the contact information that you specified was invalid. Perform the following steps to check the notification method and contact information:
Log on to the EDS console.
In the top navigation bar in the EDS console, click the
icon to go to the Message Center console. In the left-side navigation pane, choose .
On the Common Settings page, check whether notification methods that corresponds to the Notifications Regarding the Creation and Activation of Product Instances parameter are selected and whether the contact information is valid.