Configuring Multi-Domain Support

Overview

With multi-domain support, a cloud desktop can interconnect with multiple domains, and users and resources from different domains can be managed in a cloud desktop environment. Interconnecting with multiple domains helps enterprises implement centralized desktop management, enhancing efficiency and security. Flexible deployment and configuration helps meet the desktop environment requirements of different scales and service scenarios.

• Multi-domain integration: The Workspace console supports the interconnection with multiple AD domains and authentication. Administrators can configure different domains and add domain users to the cloud desktop environment.
• Centralized management: Centrally managing users and resources of multiple domains simplifies user management, improving efficiency and reducing management costs.
• Security control: You can set different access permissions and security policies for users of different domains to enhance data security and compliance.
• Cross-domain access: Users can access different desktop resources across domains, facilitating file and application sharing across departments or teams.
• Flexible deployment: You can select a desired cloud desktop deployment scheme to meet your specific business requirements.

• Only users can be added to other domains.
• An added domain cannot be deleted.

Procedure

1. Log in to the console.
2. In the navigation pane, choose Tenant Configuration > Basic Settings.

   The Basic Settings page is displayed.

3. On the page displayed, click Add other domains.
4. Configure the following parameters:
   • Domain Name: Windows AD domain name
   • Domain Administrator Account: administrator name for logging in to the Windows AD server
   • Domain Administrator Password: administrator password for login
   • Domain Controller: In the Windows AD cluster connection, you can add multiple ADs in the Windows AD cluster. If there are multiple domain controllers in the cluster, click Add. You can configure one or two domain controllers during initial registration. Once the registration is successful, you can add a maximum of 50 domain controllers by referring to Modifying Domain Configurations. To delete a domain controller, locate it in the list and click Delete in the Operation column.
     • Domain Controller Name: It can be the host name of the AD service or the combination of the host name of the AD service and the domain name.
       • The host name of the AD service: Log in to the AD server using the corresponding IP address, choose Control Panel > System and Security > System to obtain the computer name as the host name, replace the letters of the host name with uppercase letters, and use the host name as the primary domain controller name. For example, if the host name is Fa-2016Ad-01, the primary domain controller name is FA-2016AD-01.
       • The combination of the host name of the AD service and the domain name: Log in to the AD server using the corresponding IP address, choose Control Panel > System and Security > System, obtain the computer name as the host name, add the domain name to the host name, and use the combined name as the primary domain controller name. For example, if the host name is Fa-2016Ad-01 and the domain name is vdesk.cloud.com, the primary domain controller name is Fa-2016Ad-01.vdesk.cloud.com or FA-2016AD-01.vdesk.cloud.com.
     • Domain Controller IP Address: service plane IP address of the Windows AD server
   • Primary DNS IP Address: service plane IP address of the DNS server
   • Using LDAPS: Toggle on this switch to enable LDAPS communication, which improves the networking security.

5. Click OK.