Merge pull request #38 from UoA-eResearch/feature/end_of_windows_2012

Document launching a nectar Windows-Server 2019 vm

Gemfile

@@ -1,7 +1,8 @@
 source 'https://rubygems.org'
+# ruby '2.7.0'
 gem 'github-pages', group: :jekyll_plugins
 
-gem "webrick", "~> 1.7"
+gem "webrick"
 
 gem "jekyll", "~> 3.1"
 

_doc/drive-off-campus.md

@@ -37,4 +37,4 @@ Once you have successfully connected to the UoA VPN, you can refer to the below
     - [command line session via SSH]({{ site.baseurl }}{% link _doc/ssh-client.md %})
     - [graphical session via x2go]({{ site.baseurl }}{% link _doc/x2go-client.md %})
     - [graphical session via remote desktop client]({{ site.baseurl }}{% link _doc/linux-rdp-client.md %})
-* [Connecting to Nectar Windows VMs]({{ site.baseurl }}{% link _doc/ntr-windows.md %})
+* [Connecting to Nectar Windows VMs]({{ site.baseurl }}{% link _doc/ntr-windows/index.md %})

_doc/ntr-matlab.md

@@ -35,4 +35,4 @@ Then, connect with the new session, you should be able to see the graphical user
 
 To connect to your Windows VM on Nectar, please refer to this article:
 
-[How to access Windows VMs in Auckland cluster]({{ site.baseurl }}{% link _doc/ntr-windows.md %})
+[How to access Windows VMs in Auckland cluster]({{ site.baseurl }}{% link _doc/ntr-windows/index.md %})

_doc/ntr-windows/account.md

@@ -0,0 +1,37 @@
+---
+title:  "account configuration of Windows VMs in Auckland cluster"
+---
+
+## Notice
+
+Before you can use the Windows VM, you need to set a password for the administrator account configured for your Nectar use:  "res-admin".
+
+Browse to *Project > Compute > Instances* panel, and click on your instance. In the instance detail page, click *Console* tab. You'll see a welcome screen like this:
+
+To begin the login proces, click on the *Send CtrlAltDel* button on the top right corner.
+
+![res-admin account]({{ "/assets" | append: page.id | append: "/step0.png" | absolute_url }}){:width="70%"}
+
+Select the user "res-admin" to sign in. 
+
+![res-admin account]({{ "/assets" | append: page.id | append: "/step1.png" | absolute_url }}){:width="70%"}
+
+you must now change the associated password:
+
+![res-admin account]({{ "/assets" | append: page.id | append: "/step2.png" | absolute_url }}){:width="70%"}
+
+
+Your password needs to meet the requirements of 
+https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements:
+
+* at least eight characters
+* at least one of each class
+  * alphabetical characters
+  * numeric characters
+  * special characters
+* does not contain the username
+
+![res-admin account]({{ "/assets" | append: page.id | append: "/step3.png" | absolute_url }}){:width="70%"}
+
+
+

_doc/ntr-windows/index.md

@@ -0,0 +1,66 @@
+---
+title:  "How to launch and use Windows VMs in Auckland cluster"
+categories: nectar howto
+---
+
+## Notice
+
+Due to Microsoft licensing requirements, access to Windows VM on Nectar has a few limitations, including:
+- Only Windows Servers are available. No desktop Windows is offered.
+- We can not install and run Microsoft Office on Windows VMs.
+- You can not share the Windows VM with non-UoA collaborators.
+
+
+
+## Launch a Windows instance
+
+Login to [Nectar Dashboard](https://dashboard.rc.nectar.org.au/) via Tuakiri. Browse to *Project > Compute > Images* as shown in the picture below, and enter `UoA - Windows` in the search box. You will find the prebuilt images for Windows instances.
+
+![select image]({{ "/assets" | append: page.id | append: "/step1.png" | absolute_url }}){:width="70%"}
+
+
+If there are multiple images, please always choose the latest one, and click the "Launch" button to start the new instance wizard.
+
+### Select Auckland Availability Zone
+
+In the *Details* tab, please select `auckland` from the *Availability Zone* dropdown box.
+
+![select_availability_zone]({{ "/assets" | append: page.id | append: "/step2.png" | absolute_url }}){:width="70%"}
+
+### Select an Auckland Windows Flavour
+Select a "flavour" by first searching for the string 'akl.win, and then select' according to your needs, within the limits of your allocation.  Hit the up-arrow key to select it.
+
+![select_flavour]({{ "/assets" | append: page.id | append: "/step3.png" | absolute_url }}){:width="70%"}
+
+### Create security group to permit RDP Access
+
+In order to access your windows instance, you need to enable Remote Desktop Protocol (RDP, port 3389) ingress.
+Follow the instructions at [Nectar RDP security groups](./rdp.html)
+
+
+For more information about other VM launching options, security groups, and keys, please refer to the following Nectar tutorials:
+
+- [Launching Virtual Machines](https://tutorials.rc.nectar.org.au/launching-virtual-machines/01-overview)
+- [Security groups, the absolute basics](https://tutorials.rc.nectar.org.au/sec-groups-101/01-overview)
+- [Intermediate Security Groups](https://tutorials.rc.nectar.org.au/intermediate-security-groups/01-overview)
+
+## Initialise the Windows nectar res-admin administrator account
+
+Follow the instructions at [Nectar RDP admin account configuration](./account.html)
+
+
+## Remote login via Remote Desktop
+
+Follow the instructions at [Nectar RDP login ](./login.html)
+
+
+
+Click the "Launch" button, and go to *Project > Compute > Instances* panel, wait until the status of your new instance is **Active**. It might take 2-10 minutes, depending on the size of your VM.
+
+For more information about other VM launching options, security groups, and keys, please refer to the following Nectar tutorials:
+
+- [Launching Virtual Machines](https://tutorials.rc.nectar.org.au/launching-virtual-machines/01-overview)
+- [Security groups, the absolute basics](https://tutorials.rc.nectar.org.au/sec-groups-101/01-overview)
+- [Intermediate Security Groups](https://tutorials.rc.nectar.org.au/intermediate-security-groups/01-overview)
+
+

_doc/ntr-windows/login.md

@@ -0,0 +1,21 @@
+---
+title:  "remote login to Windows VMs in Auckland cluster"
+
+
+## Remote login via Remote Desktop
+
+Note: you must enable remote desktop protocol (RDP) ingress on port 3389 in the security groups of your nectar windows vm to be able to remotely login. 
+In addition, if you're off-campus, you will need to connect to the University VPN first.
+
+If you're logging in from a Windows desktop, **Microsoft Remote Desktop** is built-in. For users logging in from MacOS, download the **Microsoft Remote Desktop** client from the [Mac App Store](https://itunes.apple.com/us/app/microsoft-remote-desktop/id1295203466?mt=12){:target="_blank"}.
+
+Find the IP address of your nectar VM on the instance overview page, as follows:
+
+![step1]({{ "/assets" | append: page.id | append: "/step1.png" | absolute_url }}){:width="70%"}
+
+Open **Microsoft Remote Desktop** application, create a new connection, and in the dialogue box, enter your VM's IP address as "PC name".
+
+![step2]({{ "/assets" | append: page.id | append: "/step2.png" | absolute_url }}){:width="70%"}
+
+Connect to your VM, and login with res-admin's credential. 
+

_doc/ntr-windows/rdp.md

@@ -0,0 +1,32 @@
+---
+title:  "How to permit RDP access to Auckland Nectar windows instances"
+---
+
+### Create security group to permit RDP Access
+
+In order to access your windows instance, you need to enable Remote Desktop Protocol (RDP, port 3389) ingress.
+To do this, create a security group as follows:
+
+
+Step 1:  Within the Network tab on the left, select Security Groups, and select "Create Security Group":
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step0.png" | absolute_url }}){:width="70%"}
+
+Step 2:
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step1.png" | absolute_url }}){:width="70%"}
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step2.png" | absolute_url }}){:width="70%"}
+
+Step 3:
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step3.png" | absolute_url }}){:width="70%"}
+
+Step 4:
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step6.png" | absolute_url }}){:width="70%"}
+
+Step 5:
+
+![rdp_security_group]({{ "/assets" | append: page.id | append: "/step7.png" | absolute_url }}){:width="70%"}
+