Customize an AppStream 2.0 Fleet to Optimize Your Users' Application Streaming Experience - Amazon AppStream 2.0
Persist Environment VariablesSet Default File Associations for Your UsersDisable Internet Explorer Enhanced Security ConfigurationChange the Default Internet Explorer Home Page for Users' Streaming SessionsUser and Instance Metadata for AppStream 2.0 Fleets

Customize an AppStream 2.0 Fleet to Optimize Your Users' Application Streaming Experience

By customizing AppStream 2.0 fleet instances, you can define specific aspects of your AppStream 2.0 environment to optimize your users' application streaming experience. For example, you can persist environment variables to dynamically pass settings across applications and set default file associations that are applied to all of your users. At a high level, customizing a fleet instance includes the following tasks:

  • Connecting to an image builder and customizing it as needed.

  • On the image builder, using Image Assistant to create a new image that includes your customizations.

  • Creating a new fleet instance or modifying an existing one. When you configure the fleet instance, select the new customized image that you created.

  • Creating a new stack or modifying an existing one and associating it with your fleet instance.

Note

For certain fleet customizations, in Active Directory environments, you might need to use the Group Policy Management Console (GPMC) to update Group Policy object (GPO) settings on a domain-joined computer.

Persist Environment Variables

Environment variables enable you to dynamically pass settings across applications. For example, many engineering applications rely on environment variables to specify the IP address or host name of a license server to locate and check out a license from that server.

Follow the steps in these procedures to make environment variables available across your fleet instances.

Note

The following instructions apply to Windows fleets only.

Note

If you are using Active Directory and Group Policy with AppStream 2.0, keep in mind that streaming instances must be joined to an Active Directory domain to use Group Policy for environment variables. For information about how to configure the Group Policy Environment Variable preference item, see Configure an Environment Variable Item in the Microsoft documentation.

Change System Environment Variables

Follow these steps to change system environment variables across your fleet instances.

To change system environment variables on an image builder

This procedure applies only to system environment variables, not user environment variables. To change user environment variables that persist across your fleet instances, perform the steps in the next procedure.

  1. Connect to the image builder on which to change system environment variables and sign in with an account that has local administrator permissions. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If the image builder that you want to connect to is joined to an Active Directory domain and your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

  2. Choose the Windows Start button, open the context (right-click) menu for Computer, and then choose Properties.

  3. In the navigation pane, choose Advanced system settings.

  4. In System variables, change the environment variables that you want to persist across your fleet instances, and then choose OK.

  5. On the image builder desktop, open Image Assistant.

  6. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

    The changes to the system environment variables persist across your fleet instances and are available to streaming sessions launched from those instances.

    Note

    Setting AWS CLI credentials as system environment variables might prevent AppStream 2.0 from creating the image.

Change User Environment Variables

Follow these steps to change user environment variables across your fleet instances.

To change user environment variables

  1. Connect to the image builder on which to change system environment variables and sign in as a Template User. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If the image builder that you want to connect to is joined to an Active Directory domain and your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

    Template User lets you create default application and Windows settings for your users. For more information, see "Creating Default Application and Windows Settings for Your AppStream 2.0 Users" in Default Application and Windows Settings and Application Launch Performance.

  2. On the image builder, choose the Windows Start button, Control Panel, User Accounts.

  3. Choose User Accounts again. In the left navigation pane, choose Change my environment variables.

  4. Under User environment variables for DefaultProfileUser, set or create the user environment variables as needed, then choose OK.

  5. This disconnects your current session and opens the login menu. Log in to the image builder by doing either of the following:

    • If your image builder is not joined to an Active Directory domain, on the Local User tab, choose Administrator.

    • If your image builder is joined to an Active Directory domain, choose the Directory User tab, and log in as a domain user who has local administrator permissions on the image builder.

  6. On the image builder desktop, open Image Assistant.

  7. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

Create an Environment Variable That is Limited in Scope

Follow these steps to create an environment variable that is limited in scope to the processes that are spawned off the script. This approach is useful when you need to use the same environment variable name with different values for different applications. For example, if you have two different applications that use the environment variable "LIC_SERVER", but each application has a different value for "LIC_SERVER".

To create an environment variable that is limited in scope

  1. Connect to the image builder on which to create an environment variable that is limited in scope and sign in with an account that has local administrator permissions. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If the image builder that you want to connect to is joined to an Active Directory domain and your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

  2. Create a child folder of C:\ drive for the script (for example, C:\Scripts).

  3. Open Notepad to create the new script, and enter the following lines:

    set variable=value

    start " " "C:\path\to\application.exe"

    Where:

    variable is the variable name to be used

    value is the value for the given variable name

    Note

    If the application path includes spaces, the entire string must be encapsulated within quotation marks. For example:

    start " " "C:\Program Files\application.exe"

  4. Choose File, Save. Name the file and save it with the .bat extension to C:\Scripts. For example, name the file LaunchApp.bat.

  5. If needed, repeat steps 4 and 5 to create a script for each additional application that requires its own environment variable and values.

  6. On the image builder desktop, start Image Assistant.

  7. Choose Add App, navigate to C:\Scripts, and select one of the scripts that you created in step 5. Choose Open.

  8. In the App Launch Settings dialog box, keep or change the settings as needed. When you're done, choose Save.

  9. If you created multiple scripts, repeat steps 8 and 9 for each script.

  10. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

    The environment variable and specific value are now available for processes that are run from the script. Other processes cannot access this variable and value.

Set Default File Associations for Your Users

The associations for application file extensions are set on a per-user basis and so are not automatically applied to all users who launch AppStream 2.0 streaming sessions. For example, if you set Adobe Reader as the default application for .pdf files on your image builder, this change is not applied to your users.

Note

The following steps apply to Windows fleets only.

Note

The following steps must be performed on an image builder that is joined to an Active Directory domain. In addition, your fleet must be joined to an Active Directory domain. Otherwise, the default file associations that you set are not applied.

To set default file associations for your users

  1. Connect to the image builder on which to set default file associations and sign in with a domain account that has local administrator permissions on the image builder. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

  2. Set default file associations as needed.

  3. Open the Windows command prompt as an administrator.

  4. At the command prompt, type the following command to export the image builder file associations as an XML file, and then press ENTER:

    dism.exe /online /export-DefaultAppAssociations:c:\default_associations.xml

    If you receive an error message stating that you cannot service a running 64-bit operating system with a 32-bit version of DISM, close the command prompt window. Open File Explorer, browse to C:\Windows\System32, right-click cmd.exe, choose Run as Administrator, and run the command again.

  5. You can use either Local Group Policy Editor or the GPMC to set a default associations configuration file:

    • Local Group Policy Editor:

      On your image builder, open the command prompt as an administrator, type gpedit.msc, and then press ENTER.

      In the console tree, under Computer Configuration, expand Administrative Templates, Windows Components, and then choose File Explorer.

    • GPMC:

      In your directory or on a domain controller, open the command prompt as an administrator, type gpmc.msc, and then press ENTER.

      In the left console tree, select the OU in which you want to create a new GPO, or use an existing GPO, and then do either of the following:

      • Create a new GPO by opening the context (right-click) menu and choosing Create a GPO in this domain, Link it here. For Name, provide a descriptive name for this GPO.

      • Select an existing GPO.

      Open the context menu for the GPO, and choose Edit.

      Under User Configuration, expand Policies, Administrative Templates, Windows Components, and then choose File Explorer.

  6. Double-click Set a default associations configuration file.

  7. In the Set a default associations configuration file properties dialog box, choose Enabled, and do one of the following:

    • If you are using Local Group Policy Editor, enter this path: c:\default_associations.xml.

    • If you are using the GPMC, enter a network path. For example, \\networkshare\default_associations.xml.

  8. Choose Apply, OK.

  9. Close Local Group Policy Editor or the GPMC.

  10. On the image builder desktop, open Image Assistant.

  11. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

    The file associations that you configured are applied to the fleet instances and user streaming sessions that are launched from those instances.

Disable Internet Explorer Enhanced Security Configuration

Internet Explorer Enhanced Security Configuration (ESC) places servers and Internet Explorer in a configuration that limits exposure to the internet. However, this configuration can impact the AppStream 2.0 end user experience. Users who are connected to AppStream 2.0 streaming sessions may find that websites do not display or perform as expected when:

  • Internet Explorer ESC is enabled on fleet instances from which users' streaming sessions are launched

  • Users run Internet Explorer during their streaming sessions

  • Applications use Internet Explorer to load data

Note

The following steps apply to Windows fleets only.

To disable Internet Explorer Enhanced Security Configuration

  1. Connect to the image builder on which to disable Internet Explorer ESC and sign in with an account that has local administrator permissions. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If the image builder that you want to connect to is joined to an Active Directory domain and your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

  2. On the image builder, disable Internet Explorer ESC by doing the following:

    1. Open Server Manager. Choose the Windows Start button, and then choose Server Manager.

    2. In the left navigation pane, choose Local Server.

    3. In the right properties pane, choose the On link next to IE Enhanced Security Configuration.

    4. In the Internet Explorer Enhanced Configuration dialog box, choose the Off option under Administrators and Users, then choose OK.

  3. In the upper right area of the image builder desktop, choose Admin Commands, Switch User.

  4. This disconnects your current session and opens the login menu. Log in to the image builder by doing either of the following:

    • If your image builder is not joined to an Active Directory domain, on the Local User tab, choose Template User.

    • If your image builder is joined to an Active Directory domain, choose the Directory User tab, and log in as a domain user who does not have local administrator permissions on the image builder.

  5. Open Internet Explorer and reset your settings by doing the following:

    1. In the upper right area of the Internet Explorer browser window, choose the Tools icon, then choose Internet options.

    2. Choose the Advanced tab, then choose Reset.

    3. When prompted to confirm your choice, choose Reset again.

    4. When the Reset Internet Explorer Settings message displays, choose Close.

  6. Reboot image builder.

  7. Choose Admin Commands, Switch User, and then do either of the following:

    • If your image builder is not joined to an Active Directory domain, on the Local User tab, choose Administrator.

    • If your image builder is joined to an Active Directory domain, choose the Directory User tab, and log in with the same domain account that you used in step 4.

  8. On the image builder desktop, open Image Assistant.

  9. In Step 2. Configure Apps, choose Save settings.

  10. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

Change the Default Internet Explorer Home Page for Users' Streaming Sessions

You can use Group Policy to change the default Internet Explorer home page for users' streaming sessions. Alternatively, if you do not have Group Policy in your environment or prefer not to use Group Policy, you can use the AppStream 2.0 Template User account instead.

Note

The following steps apply to Windows fleets only.

Use Group Policy to Change the Default Internet Explorer Home Page

In Active Directory environments, you use the Group Policy Management (GPMC) MMC-snap-in to set a default home page that users can't change. If Active Directory is not in your environment, you can use Local Group Policy Editor to perform this task. To set a home page that users can change, you must use the GPMC.

To use the GPMC, do the following first:

To change the default Internet Explorer home page by using a Group Policy administrative template

You can use a Group Policy administrative template to set a default home page that users can't change. For more information about administrative templates, see Edit Administrative Template Policy Settings in the Microsoft documentation.

  1. Open the AppStream 2.0 console at https://console.aws.amazon.com/appstream2.

  2. If you are not using Active Directory in your environment, open Local Group Policy Editor. If you are using Active Directory, open the GPMC. Locate the Scripts (Logon\Logoff) policy setting:

    • Local Group Policy Editor:

      On your image builder, open the command prompt as an administrator, type gpedit.msc, and then press ENTER.

      Under User Configuration, expand Administrative Templates, Windows Components, and then choose Internet Explorer.

    • GPMC:

      In your directory or on a domain controller, open the command prompt as an administrator, type gpmc.msc, and then press ENTER.

      In the left console tree, select the OU in which you want to create a new GPO, or use an existing GPO, and then do either of the following: :

      • Create a new GPO by opening the context (right-click) menu and choosing Create a GPO in this domain, Link it here. For Name, provide a descriptive name for this GPO.

      • Select an existing GPO.

      Open the context menu for the GPO, and choose Edit.

      Under User Configuration, expand Policies, Administrative Templates, Windows Components, and then choose Internet Explorer.

  3. Double-click Disable changing home page settings, choose Enabled, and in Home Page, enter a URL.

  4. Choose Apply, OK.

  5. Close Local Group Policy Editor or the GPMC.

To change the default Internet Explorer home page by using Group Policy preferences

You can use Group Policy preferences to set a default home page that users can change. For more information about working with Group Policy preferences, see Configure a Registry Item and Group Policy Preferences Getting Started Guide in the Microsoft documentation.

  1. In your directory or on a domain controller, open the command prompt as an administrator, type gpmc.msc, and then press ENTER.

  2. In the left console tree, select the OU in which you want to create a new GPO, or use an existing GPO, and then do either of the following:

    • Create a new GPO by opening the context (right-click) menu and choosing Create a GPO in this domain, Link it here. For Name, provide a descriptive name for this GPO.

    • Select an existing GPO.

  3. Open the context menu for the GPO, and choose Edit.

  4. Under User Configuration, expand Preferences, and then choose Windows Settings.

  5. Open the context (right-click) menu for Registry and choose New, Registry Item.

  6. In the New Registry Properties dialog box, specify the following registry settings for Group Policy to configure:

    • For Action, choose Update.

    • For Hive, choose HKEY_CURRENT_USER.

    • For Key Path, browse to and select HKEY_CURRENT_USER\SOFWARE\Microsoft\Internet Explorer\Main.

    • For Value Name, enter Start Page.

    • For Value Data, enter your home page URL.

  7. On the Common tab, choose Apply Once, Do not Re-Apply.

    Note

    To enable your users to choose the Use Default button in their Internet Explorer browser settings and reset their default home page to your company home page, you can also set a value for Default_Page_URL without choosing Apply Once and Do not Re-Apply.

  8. Choose OK and close the GPMC.

Use the AppStream 2.0 Template User Account to Change the Default Internet Explorer Home Page

Follow these steps to use the Template User account to change the default Internet Explorer home page.

To change the default Internet Explorer Home page by using the Template User account

  1. Connect to the image builder on which to change the default Internet Explorer home page and sign in with the Template User account. To do so, do either of the following:

    • Use the AppStream 2.0 console (for web connections only)

    • Create a streaming URL (for web or AppStream 2.0 client connections)

      Note

      If the image builder that you want to connect to is joined to an Active Directory domain and your organization requires smart card sign in, you must create a streaming URL and use the AppStream 2.0 client for the connection. For information about smart card sign in, see Smart Cards.

    Template User lets you create default application and Windows settings for your users. For more information, see "Creating Default Application and Windows Settings for Your AppStream 2.0 Users" in Default Application and Windows Settings and Application Launch Performance.

  2. Open Internet Explorer and complete the necessary steps to change the default home page.

  3. In the upper right area of the image builder desktop, choose Admin Commands, Switch User.

  4. This disconnects your current session and opens the login menu. Log in to the image builder by doing either of the following:

    • If your image builder is not joined to an Active Directory domain, on the Local User tab, choose Administrator.

    • If your image builder is joined to an Active Directory domain, choose the Directory User tab, and log in as a domain user who has local administrator permissions on the image builder.

  5. On the image builder desktop, open Image Assistant.

  6. Follow the necessary steps in Image Assistant to finish creating your image. For more information, see Tutorial: Create a Custom AppStream 2.0 Image by Using the AppStream 2.0 Console.

User and Instance Metadata for AppStream 2.0 Fleets

AppStream 2.0 fleet instances have user and instance metadata available through Windows environment variables. You can use the following environment variables in your applications and scripts to modify your environment based on the fleet instance details.

Environment Variable Context Description
AppStream_Stack_Name User The name of the stack from which the streaming session started.
AppStream_User_Access_Mode User The access mode used to manage user access to the stream. The available values are custom, userpool, or saml.
AppStream_Session_Reservation_DateTime User The date and time when the user's streaming session started.
AppStream_UserName User The user name associated with the user.
AppStream_Session_ID User The session identifier for the user's streaming session.
APPSTREAM_SESSION_CONTEXT Machine Contains the parameters passed to your streaming application when a session is started. For more information, see Session Context.
Note

This environment variable is only available after the first application launch.
AppStream_Image_Arn Machine The ARN of the image that was used to create the streaming instance.
AppStream_Instance_Type Machine The streaming instance's type. For example, stream.standard.medium.
AppStream_Resource_Type Machine The type of AppStream 2.0 resource. The value is either fleet or image-builder.
AppStream_Resource_Name Machine The fleet's name.

On Linux fleet instances, these environment variables are exported through the following profile.d scripts:

  • User environment variables in /etc/profile.d/appstream_user_vars.sh

  • System environment variables in /etc/profile.d/appstream_system_vars.sh

To access the environment variables, you must explicitly source these files in your applications.