Questions tagged with Amazon AppStream

Is there is any way to schedule the managed imaged updates in appstream rater than doing it manually every single time.

currently, Appstream is running with Windows Server 2012 R2 image. We all know, that the Windows Server 2012 R2 is in End of Life. should we consider to migrate the image from windows Server 2012 R2 to newer versions like Windows Server 2016 or Windows Server 2019.

we have multiple AWS accounts (OU). we need to know how to get to know in what are all the accounts the appstream was created and currently in running state.

We would like to use a service account in AWS AppStream, and we would not like to synchronize the users from our custom homegrown user management solution to AppStream. Is there a way to use AppStream with a service account, so that every app stream instance shall be unique with a different session. Any suggestion/direction on the same is appreciated

How to keep update the microsoft patching updates in the Appstream. For Workspace, we can patch it using the SSM. For Beanstalk, we can patch it using the Managed updates feature. Likewise, how to Patch the Appstream

We have setup an identity provider to use Azure AD to authenticate users that access an AppSteam stack. This is a new build. I used the link below to do the set up. Everything seems to be working from the authentication side as I can get logged in (can see the user logged if I'm logged into the console and then it refreshes when not using in private browser window). However, when it redirects to the AWS Appstream page, I'm getting Error: Bad Request.(Error Code: INVALID_RELAY_STATE);Status Code:400. This suggests a malformed relay state URL, but I have verified that it appears to be the correct syntax (variables and stack name case-sensitive). The SAML response appears to be clean using the browser code analysis tools and the SAML decoder. The only thing that seems odd is that cookie analysis from the browser reports the credentials are expired (there are several errors in the capture i.e. Cookie "aws-creds" has been rejected because it is already expired). The 400 response header shows the statement "expires:Tue, 03 Jul 2001..." which is bizarre. Any help would be greatly appreciated. https://aws.amazon.com/blogs/desktop-and-application-streaming/enabling-federation-with-azure-ad-single-sign-on-and-amazon-appstream-2-0/

Unable to run batch file command(CertUtil.exe) as normal user in fleet image. While running batch file command, we get an access denied error. We also tried to run as "Administrator", but it just prompts Admin password. Any comment/suggestion on running batch file command with Administrator privileges?

We have an windows desktop application which has a certificate with private keys. This desktop application we have created the appstream image, and we would like to launch it from browser. But when we create the snapshot image, the private keys are getting lost while generating stream Url for a user. Any suggestion/direction on importing the certificate private keys is what we are looking for.

I need to run an earlier version of Visio in my AppStream. https://support.microsoft.com/en-us/topic/how-to-revert-to-an-earlier-version-of-office-2bd5c457-a917-d57e-35a1-f709e3dda841 Tells how to do this and I have successfully done it on my local system. When I attempt in ImageBuilder, it pretends to work but doesn't. Is there a way to do this?

A recent appstream update appears to be causing issues on some machines. Specifically when attempting to launch on some machines it never opens. Upon reviewing Windows event logs it shows: Fault bucket 1612169176490401806, type 5 Event Name: CLR20r3 Response: Not available Cab Id: 0 Problem signature: P1: appstreamclient.exe P2: 1.1.414.0 P3: 6261ce2a P4: mscorlib P5: 4.8.4400.0 P6: 60b90614 P7: 426e P8: 12 P9: System.IO.FileNotFoundException and Application: appstreamclient.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.IO.FileNotFoundException at CefSharp.CefSettingsBase..ctor() at AppStream.Cef.InitializationUtils.InitializeCefSharp() at ViewerApp.App..ctor() at ViewerApp.App.Main() Does anyone know where I can obtain older versions of the Appstream client until they work out this bug? Perhaps 1.0.407 or 1.0.375?

Is it possible to have different login URLs for different IAM users or for different stacks of the same root account? e.g. user IAM 1 -> linkA userIAM2 -> linkB or Stack1 -> linkA Stack2 ->linkB what I need is: to deploy an application with different settings for different end-users, if possible with different login links. Then give the user a chance to see their stack and fleet belong. Do you have any suggestions on how to do that? Thanks in advance.

Is it possible to give access only to a certain image, stack, or fleet with IAM policies? Do you have any examples? I tried with a policy but it returns this error: > User: arn:aws:iam::xxxxxxxxx:user/xxxxxxxx is not authorized to perform: appstream:DescribeFleets on resource: arn:aws:appstream:eu-central-1:xxxxxxxxxxx:fleet/* because no boundary policy allows the appstream:DescribeFleets action > My need is: in an AWS account, an IAM user must only see some image/fleet/stack. thanks

I have already made request to increase the quota limit for the stream.graphics-pro.8xlarge instance for image builder. I got response from the AWS support executive and got confirmation that quota increase has been approved and I can use the requested instance type for image builder in AppStream. But while using the image builder, I am not getting the option to use the Graphics-Pro instance family. It only shows General purpose and G4 instance family. What am I missing here? Please do the needful.

We have an application in AppStream using an AppBlock with an Elastic Fleet. The application is an executable file hosted in a public S3 bucket (< 1 MB). When the instance launches there is no sign of the EXE having been downloaded to the usual folder (C:\AppStream\<AppBlockName\MyApp.exe). This was working yesterday as of 6:30 PM EDT. We have also tried a similar approach using a VHD (approx. 100MB) instead of an executable file with the same result. Finally we have tried new App Blocks, new Applications, and new Fleets to rule out any potential issues with the existing ones and the result has been the same each time. We are wondering if there is any place where a log file is stored / available to determine why this is failing or if there is an operational issue with AppStream in the ca-central-1 region?

We have a number of fleets already set up and those are working fine but one of the newer fleets that I have created has an issue when new users try to launch and log into Appstream instances that belong to the said fleet. The password that is used is correct but they sometimes get an incorrect password error and then it pops up "An unknown error occurred (1909)". The strange part about it all is that I encountered a similar problem when I first launched and logged in to an instance on the fleet. It took about four or five attempts before it worked. Since that successful sign in, I only encounter the above error occasionally but it works most of the time. Unfortunately, the same doesn't seem to be happening for the newer users that have been assigned access to it. So my questions are, why is this happening in the first place and why is it allowing few users that have signed in previously but none of the new users? FYI, we use Okta as our identity provider. Any advice you may be able to provide would be most appreciated. Thanks and regards, Diem

We would like to deploy software via appstream that requires a license tied to the MAC address. I can see the ENIs in the EC2 page, but those are transient. Is there a way to assign a network interface to each appstream streaming instance that would guarantee a repeatable MAC address, or range or MAC addresses for multiple instances? Thanks!

Can i use AWS Cognito to authenticate to AWS Appstream and setup entitlements? My goal is to have one "Golden Image" with all the software installed and authenticate the users to see only the apps they need in catalogue mode.... Thanks for any help in advance!

I’m troubleshooting problems with the SSO integration of AppStream2.0 with ADFS. I followed step by step the guide indicated at the following link : https://aws.amazon.com/it/blogs/compute/enabling-identity-federation-with-ad-fs-3-0-and-amazon-appstream-2-0/ but when I try to navigate via browser in the **RelayState URL** , the ADFS page returns an error. Need to enable some other AWS service or is there a more detailed guide? As an image for APPStream2.0 I used a standard image of the Appstream2.0 service while the AD FS is resident on our windows machine. AD FS is 3.0 . Any suggestion? Thanks

Is it possible to assign an elastic IP to an AppStream instance? Interested for both streaming instances and image builder instances. It seems that they are automatically assigned when the instances are in public subnets, with no way to use an already provisioned elastic IP.

We always have problems to onboard users on Appstream, because almost always the Welcome email (which is required to set the password) we send from the Appstream 2.0 management console will end up in Office 365 Quarantaine (or users don't receive this email at all). I would like to think that Microsoft (with Azure) sees AWS as competition so that's how they try to nag users. Is there any way we can prevent this?

We've experience this exception when requesting streaming urls, is there any way of increasing our service quota for allowing more requests? If not what's the recommend way of proceeding when we get such exception, Wait before retry? any specific algorithm or wait times suggested that could help to mitigate this issue?

We've seen that when the fleet that we've available is scaling out instances people is prompted with a pop up with the following message "No streaming resources are available, try again after a few minutes" with a retry button available. In this situation we would have expected that if after a while there are no instances available the streaming url generated will expired after the time value configured for url validity 60 seconds but it's not, users can retry even when the url should have expired. Can someone confirms that url validity doesn't take effect in this situation? if so, what's the max time the user can use that given url after is invalidated if he remains clicking retry periodically? We already know that the recommended approach is ensuring that there are enough instances for incoming users but we can't predict our usage patterns accurately and we end up reaching this more than desired affecting to our user experience.

I have my elastic fleet application just about ready to go. I’m using dynamically generated streaming URLs and it’s working great now. I only have a single application and would like to eliminate the step of the user clicking on the lone app icon in the catalog. I’ve reviewed the documentation on custom branding and don’t see an obvious way to so it. Wondering if that could be scripted somehow. Thank you!

I have a fully working custom application in AppStream 2.0. I can create a streaming URL and it works great. I followed the instructions for using a custom domain and it successfully goes to the appstream page, but it's saying "No applications available. Please contact your IT administrator for assistance." All I'm doing is replacing the "appstream2.us-east-1.aws.amazon.com" with my custom domain, keeping the authenticate?parameters clause intact. I've tried adjusting which headers are cached but it doesn't seem to change anything. Any ideas?

I have a custom Windows application I'm trying to deploy an Elastic Fleet to. I've created the VHDX file, verified that I can mount it with the Powershell script (using a F: drive letter). I have the VHDX image, my script and the icon file in a dedicated S3 bucket and the JSON permissions all set up. When I launch the app, I can see the icon perfectly fine - so that tells me the permissions on the bucket are set correctly. I saw the other question regarding the script policy override, so that is in place as well. It takes at least 2-3 minutes for the streaming to start, and when it does, the screen is all black. I'm actually able to Fn the Ctrl-Alt-Delete to bring up task manager. From there I can launch a command prompt, and I do not see the F drive mapped. In fact, I don't see the C:\AppStream folder at all. According to the AppStream documentation, I should see log files in an S3 bucket, but I do not see a folder for the fleet in any of my S3 buckets. I should also mention that I have an On-Demand Fleet running and this works perfectly fine, but I would like to get this to work on Elastic since that is a better fit for my use case. I've tried deleting the fleet, stack, app block, app, and recreating all of it with the same results. Any ideas what I'm doing wrong here?

If multiple users connect to the same workstation/stream, can one of users delegate control to another user? Can that user then give up control etc.

Hi, I am setting up an AppStream Elastic Fleet on Windows and I can get into a running instance and see that the virtual hard drive file and startup script are downloaded to the machine, but the startup script fails. There seems to be a permissions issue, as when I run the script in an ImageBuilder instance it runs okay. I can see that the initial part of the script (which is basically the AWS sample script) runs as it writes the dispart commands to a text file as expected. However as the startup script needs to mount the virtual hard drive the application can not run. By the way, I can get into the running instance using the function keys drop-down to send the instance ctrl+alt+del and get the into the task manager. This seems like a security issue - it would be good to disable this key sequence or by some other means disable the task manager.

I have an on-demand fleet. When starting as user I get the normal 2-minute start up timer. About 10% of the time this works fine providing a streaming session. 90% of the time I get the message "Your session is taking longer than expected to prepare" Then 10% of the time after this the session starts as normal. 90% of the time when I get the "Your session..." the session appears to hang with no user message. Looking at fleet usage it looks like the system thinks it is running but then eventually times out and user has to start over. This has been working flawlessly for several years. I'm at a loss as to what is going on and how to proceed. Any words of wisdom from anyone? Thanks. Paul ===================== editing question 1/19/22 based additional date gathering Since initial post have been attempting to construct an example to take to support. Here's where I am at the moment. Summary -- 20% of login attempts result in 20-minute delay. Any thoughts before going to support? Thanks, Paul =========================== See below for user view of issue and fleet view of issue. Fleet Info... - Always on does not fail - On-demand fail rate perhaps 20% resulting in 20 minute login delay On Demand Fleet Configuration (all defaults taken during fleet configuration)... Instance type stream.standard.large Fleet type On-demand Stream view App Maximum session duration 960 Minutes IAM role None Desired Capacity 1 Disconnect timeout 15 Minutes Idle Disconnect Timeout 15 Minutes Minimum capacity 1 Maximum capacity 5 Scale In Policies default-scale-in: If Capacity Utilization <= 25 % then remove 1 instance(s) default-scale-out: If Capacity Utilization >= 75 % then add 2 instance(s) Scheduled Scaling Policies - Typical fail experience =================================: User view =======: 21:04 Attempt to login, session taking longer. Being prepared. Taking longer. Being prepared. Taking longer. Being prepared. No streaming resources available, Retry. Session expired, OK. 21:11 Attempt to login. No streaming resources available, Retry. Repeated retries. 21:23 Normal login sequence. Session being prepared, Connecting, Application Available, Loading app settings 22:14 Logout Fleet view ======: Fleet Usage Log: 21:03 Actual 1 Inuse 0 Desired 1 Available 0 Pending 0 21:04 Actual 1 Inuse 1 Desired 1 Available 0 Pending 0 21:06 Actual 1 Inuse 1 Desired 3 Available 0 Pending 2 21:10 Actual 0 Inuse 0 Desired 3 Available 0 Pending 3 21:23 Actual 2 Inuse 1 Desired 3 Available 2 Pending 1 21:24 Actual 3 Inuse 1 Desired 3 Available 2 Pending 0 22:14 Actual 3 Inuse 1 Desired 3 Available 2 Pending 0 22:15 Actual 2 Inuse 0 Desired 3 Available 2 Pending 1 22:35 Actual 2 Inuse 0 Desired 1 Available 2 Pending 0 22:36 Actual 1 Inuse 0 Desired 1 Available 1 Pending 0

Hi fellow AWS techs have a strange issue with AppStream 2.0 aftre setting up and then assigning a stack to a user. the workflow sennds out Welcome Email - no issues, then send another which requests user login from link and aos forces a password chaneg. This all works dandy, however, when I try and resend - email not sent when fleet re-assigned to user -

Hey everyone, I've got a customer who does interactive art installations, using mostly gaming engines (Unreal and Unity primarily). They have an ask for mutliple viewers to a NiceDCV stream, on the order of 3-5 viewers, not hundreds/thousands. I can't see an obvious way to have multiple clients attach with NiceDCV. IVS is <3 seconds latency, but this will be too slow for them to be able to use it. They currently use gamelift for server-side state for several workloads and would otherwise have multiple instances (on-prem/appstream/ec2+niceDCV) staying in sync via a gamelift server. But in this case avatar control is out-of-band and they have a single shared viewport across multiple sites instead, so it would be a waste of resources and we'd love to be able to avoid that.

I've setup AppStream 2.0 using AWS Active Directory as identity provider using the guide below https://aws.amazon.com/blogs/desktop-and-application-streaming/enable-federation-with-aws-single-sign-on-and-amazon-appstream-2-0/ The application is configured on the SSO portal. Relay State = https://appstream2.us-east-1.aws.amazon.com/saml?AppStreamStack1&accountId=xxxxxxxxxxx I can logon to the SSO portal with AD credentials and am presented with the Appstream icon above. I get this error every time: Bad Request.(Error Code: INVALID_RELAY_STATE);Status Code:400 There is very little about this error except that I must have the URL wrong. It would appear the AD authentication part is working (the hard part?) Any ideas how to troubleshoot? Found the problem: https://appstream2.us-east-1.aws.amazon.com/saml?**stack=**AppStreamStack1&accountId=xxxxxxxxxxx Edited by: stevea3342 on Jun 25, 2021 4:24 PM Edited by: stevea3342 on Jun 25, 2021 4:33 PM

Customer makes a data streaming service available via PrivateLink. Another customer wants to deploy their application on AppStream and utilize that data feed. While I know it is "trivial" to connect to the data stream via PrivateLink on an EC2 instance, I'm not sure if this can be done in AppStream or Workspaces given the shared pool of these services. Can one customer's AppStream or Workspaces make connections to another customer's account via PrivateLink?

Hello, I am currently trying to make API calls using AppStream, however I keep getting an error saying that AWS.AppStream is not a constructor, despite writing it to match the documentation here <https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/AppStream.html>. I made sure to have the most recent sdk included and have no problem setting the AWS region and credentials or making API calls for other services. It only seems to reject the constructor for AppStream. This is what I have it written as: 'var appstream = new AWS.AppStream();' Any help is appreciated. Edited by: JakeBr on Feb 18, 2021 3:59 PM

We're considering using Amazon AppStream as a way to connect to our sandbox environments outside of the corporate network. Is it possible to have AppStream only stream a specific application, rather than a desktop experience? For example: A specific URL on Google Chrome.

Hi, Customer who has a large Amazon Appstream 2.0 fleet wants to optimize outbound proxy/firewall configuration for access from their corporate network. Is there is please a way to identify Appstream 2.0 IP public ranges in Amazon IP ranges? I do not see any specific service for Appstream 2.0 in Amazon Public IP ranges [here][1]. > Valid values: AMAZON | AMAZON_APPFLOW | > AMAZON_CONNECT | API_GATEWAY | CHIME_MEETINGS | CHIME_VOICECONNECTOR | > CLOUD9 | CLOUDFRONT | CODEBUILD | DYNAMODB | EC2 | > EC2_INSTANCE_CONNECT | GLOBALACCELERATOR | KINESIS_VIDEO_STREAMS | > ROUTE53 | ROUTE53_HEALTHCHECKS | S3 | WORKSPACES_GATEWAYS Should the customer use "WORKSPACES_GATEWAYS" ? Or, how can they find the public IPs corresponding to streaming endpoints on Appstream 2.0? Note: customer is aware they could also stream from an Interface VPC endpoint, but they also want to keep the internet access open for other use cases. [1]: https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html#aws-ip-syntax

A customer has some VDI workloads On-Premise and is evaluating AppStream 2.0 to migrate its VDI workloads. Today, the customer is able to create custom desktop shortcut for each VDI application. They just have to double-click on the shortcut and the application is launched. What's more, users are authenticated. Is there a way to create custom shortcut for each golden image used within an AppStream 2.0 fleet through the client and/or authenticate in the same time these users? [1]: https://docs.aws.amazon.com/appstream2/latest/developerguide/client-system-requirements-feature-support.html#feature-support-native-application-mode

could you please help us understand something related to the costs in AppStream? In a fleet if we set the maximum to 50 instances, will we pay for 50 running instances or we will pay only for the desired capacity adjusted by the scaling actions?

According to the Microsoft site: [https://docs.microsoft.com/en-us/fslogix/overview#requirements][1] >You are eligible to access FSLogix Profile Container, Office 365 Container, Application Masking, and Java Redirection tools if you have one of the following licenses: >* Microsoft 365 E3/E5 * Microsoft 365 A3/A5/ Student Use Benefits * Microsoft 365 F1 * Microsoft 365 Business * Windows 10 Enterprise E3/E5 *Windows 10 Education A3/A5 * Windows 10 VDA per user * **Remote Desktop Services (RDS) Client Access License (CAL)** * Remote Desktop Services (RDS) Subscriber Access License (SAL) * FSLogix solutions may be used in **any public or private data center**, as long as a user is properly licensed. * FSLogix tools operate on all operating systems newer than, and including: * * Desktop - Windows 7 * * **Server - 2008 R2** Since the RDS CAL is included, and the OS is Server 2008 or later, then FSLogix is licensed on all Amazon WorkSpaces and Amazon AppStream 2.0 implementations. Is that correct or am I missing something? [1]: https://docs.microsoft.com/en-us/fslogix/overview#requirements

Can we use AppStream as a target for CodeDeploy?

My client wants to use application streaming to let employees access five or six corporate applications. Regarding the use of AppStream 2.0 I understand that all the applications can be installed in the same image. Does the number of applications have an impact on the price (apart from the size of the image)? Also, when using AppStream 2.0 how does the consistency of the data work? Where is the data stored? Thanks!

A customer is asking whether AppStream can host Desktop Outlook, Desktop Excel, Desktop Word, Desktop Powerpoint, Visio, Adobe Acrobat DC. I can't find anything clear in the documentation or forums. If we can host these via AppStream, are there licensing or Active Directory restrictions they need to know about?

Even if StartUrl is setup in "HKLM:\Software\Amazon\AppStream Client", the Windows Appstream clients prompts the user to type the URL and hit connect even though the URL is pre-populated. When StartUrl is setup in HKLM, the Windows Client should auto-connect instead of showing the URL and asking the user to hit connect. We're looking at replacing Citrix with Appstream and in a large scale deployment, this is too confusing for users. There should be a registry setting to disable the URL prompt completely and auto-connect users. Our Appstream environment user SAML with AzureAD, with Active Directory Domain-joined appstream instances. Thank you.

Customer is testing AppStream to run an LMS for their customers. They plan on integrating their own application in a web app, handle the users via Cognito. However, they want the UX to be as smooth as possible, and therefore automatically launch the default application (their own), when the user clicks on a button that creates the URL (e.g. via the CreateStreamingURL API) - they want to skip the "Choose your app to get started". Is there a way to do so?

A customer is interested by our VDI solutions to offer CAD applications to their end users but I have some questions where I do not have answers (yet): **Q1:** As Amazon AppStream 2.0 is providing a managed NICE DCV server, do the customer is able to use the NICE DCV client from his/her laptop in addition to the web browser (to get a better user experience) or the web browser is well-managing it? If it is, do we have benchmark on it? **Q2:** By using Amazon Workspaces thanks to Graphics and GraphicsPro bundles available, do the customer has to install a NICE DCV server on each workspace to get benefits from NICE DCV protocol or our own Workspace client application is well-handling it (thanks to the PCoIP protocol)? If it is, do we have benchmark or relevant customer story on it? **Q3:** If Amazon AppStream 2.0 solution is the selected by the customer (thanks to the wide range of GPU at the customer disposal), what about cost? Indeed, CAD applications will incur a lot of data egress charges while data egress costs in Amazon Workspaces (for pixel streaming) are included in the bundles charges. Thank you very much for your useful inputs! Warm regards,

A customer wants to deploy the following Apps to Appstream 2.0 1. Aveva PDMS 2. Tekla 3. Bentley Staad 4. Bentley SACS 5. Autodesk Navisworks 6. Truview 7. Autospool Wanted confirmation from Appstream AoDs if the above s/w are compatible with Amazon Appstream 2.0 and any caveats to using it e.g. licensing etc.

A customer is currently using VMware Horizon View for their VDI environment and planning to move to AppStream 2.0. They use Dell Wyse thin clients and wanted to know if they would be able to access AppStream 2.0 instances with these devices. My understanding is that this specific model is not supported. From AWS documentation, AppStream 2.0 will work with ***IGEL-compliant*** thin clients. It does not appear that Dell Wyse P25 is IGEL compliant from vendor documentation. I would like to get a confirmation on whether or not this is supported with AppStream 2.0 or there are any alternatives. The customer will eventually pursue BYOD approach to eliminate additional equipment (thin/zero clients and monitors) that they need to manage and maintain, but need a definitive answer for existing thin clients support. Dell Wyse 5030 PCoIP Zero Client / P25 documentation: https://www.dell.com/support/home/en-us/product-support/product/wyse-p25/docs

When creating a new AppStream VPC according to the Getting Started Guide at <https://d1.awsstatic.com/product-marketing/AppStream2.0/Amazon%20AppStream%202.0%20Getting%20Started%20Guide%20April%202018.pdf>, a NAT Gateway is included in the setup. The NAT Gateway has its own costs which are not part of the published costs of the AppStream service. Thus I would like to know whether this NAT Gateway is essential for functioning of the AppStream. What will be lost if there is no NAT Gateway? For example, will the Image Builder still work? Will users lose Internet access so they cannot use a streamed browser, for example?

Last couple of days I am having problems uploading files. I get through the selection process OK, but then a fleeting window comes up -- "Error, can't upload file, ...invalid path -- try again later" or something close to this. Load is from Mac OS Catalina. Also tried from High Sierra -- identical problem. Have done this many times before and don't think I'm doing anything different, but of course could be. Anyone else experiencing this? Perhaps know of workaround? This is on project critical path. Thanks. Paul

Just wondering if customers can build an Appstream fleet that connects back to file shares at customer's data center? Thanks

I'm testing AppStream2.0 desktop client to connect to a stack that integrated with AWS SSO. Apparently I can't put the SSO URL & the only option is to use the Appstream URL. If I copy the application URL which I get after login to the SSO (sample : https://appstream2.ap-southeast-1.aws.amazon.com/#/reserve?reference=fleet%2FOsakaFleet-AlwaysOn), the client throw 404 error. Is there any specific way to use AS2 client with SSO-based Appstream stack?

Customer who is on-prem and also working with Azure to host some Windows 10 remote desktop workloads. They were very interested in Workspaces, especially as it works very well with Active Directory. They wanted to know if Workspaces has a similar capabilities as Windows 10 Enterprise multi-session - it seems like it allows for concurrent sessions with several users: https://docs.microsoft.com/en-us/azure/virtual-desktop/windows-10-multisession-faq They are looking to be able to host a single MS SQL database as well as a 3rd party application, and access it via remote desktops for each of their 10-15 users. However, they seemed averse to hosting it on an EC2 or RDS instance and using RDP to access it via WorkSpaces - specifically they "don't want to use a terminal server", and would rather stream the application to their users which then accesses the database (I'm not sure where the database would be, it seems like it would have to be hosted somewhere though). I was considering AppStream 2.0 to be the best service to turn to for this use case, but was wondering if there is a better solution, possibly more in line with what they are looking at with Windows 10 Enterprise multi-session.

Hi Looking for a secure way to use SSH Tunnel, then RDP through local hosts. We have several options to accomplish this : Bastion Host or SM Session Manager or AWS AppStream. From the 3 options is there aclear recommendation and best approach for SSH , RDP ? Thanks

Hi Does anybody have a recipe for exposing Perfmon in AppStream? Is it even possible?

A customer is using AppStream to serve its customers. They want to know that when their customer is connected to the AppStream instance, is it possible to block access to certain external web sites?

A customer is asking us to show virtual desktop (VDI) Solution. They want to have 4 or 5 type of vdi (office low perf, office high perf, cad installation). They need to have vdi with file share on aws (for home folder) and with possibility to connect with on-prem (direct connect), and need to join to domain controller (windows desktop) In this case which is the service more suitable? In case is it possible to have home folder mapped on fsx for example? Thanks a lot

I have an app stream image that includes Windows Explorer. Send to zip is broken there. It is build on: AppStream-WinServer2019-09-18-2019 In the final image right-mouse, Send To on file/folder gives blank selection list. It is fine in the Image Builder and in Image Test. Creating zip files is critical to what I do and worked fine until I switched to Windows10 based server. Googling around seems to indicate this can happen in Windows10 and solutions involve things requiring admin privileges which are of course not available to my image end users. Has anyone else encountered this and discovered a solution? I see there is a 12/12/19 basis image out there. It's kind of a pain to go that route unless I have some confidence this will fix the issue. Thanks. Paul

A customer wants to use AppStream 2.0 for a simple application that utilize GPU a lot. This might be a very simple question but I can't find the answer from our webpage, the questions are: 1. Multiple users will be using the app remotely, how can a user only access his/her data and can't see data from other else. 2. Can it integrate with Workdoc so that user can access his/her own files in the app? 3. Can admin monitor the CPU/RAM/GPU utilization of the AppStream?

I have been unable to get any answers in how to model the rough user-cost for my deployment. I want an always-on fleet but am not clear what control I have over this. I want to delivery a peak usage of 500 users - but this will be very infrequent. The actual usage will probably be within a 8-10 hour window each day with the peak between 09:00-17:00 and very few users (less than 50) outside of these hours. Is it possible to use a combination of AWS-CLI and the Fleet scaling to control these and reduce costs? e.g. at 06:00 each day 100 instances spin up to support initial users and the fleet scaling options automatically add additional instances up to a maximum of 500 through the day. The fleet scaling also reduces down the number of 'on instances' based on active users, until 22:00 when all instances are shut-down (but still available to spin-up 'on demand' if requested?). This would mean that the cost-per user would be based on a combination of 'on-time' and 'off-time' throughout the day rather than cost for 500 users 'always on'. Can any one explain if this is possible/reasonable or how the costing works in practice?

Can I use Private Windows server image (AWS AMI) for creating a base image for an Appstream application? Due to company security policy I do not want to use 'standard' AWS Windows server images available in Appstream 2.0 to build the Appstream application but would like to use secure Windows server images (AMI). Thanks SJ Edited by: SJ on Aug 28, 2019 4:40 AM

 I'm doing research for a customer with the following requirements and I was wondering if this is a use case that is supported by AppStream 2.0 - Customer has built a Second Life world where members can interact including via voice. This means that the client device should be able to use the microphone to send to the AppStream instance. I guess a similar use case would be supporting Skype installed in AppStream and that a user accessing the virtual desktop in their browser could make an skype call. - Customer wants members to have access to the Second Life experience from devices with lower resources such as tablets and Chromebooks. Second Life requires the installation of a desktop client application that is resource intensive and requires specific graphic cards.  See https://secondlife.com/my/support/system-requirements/?lang=en-US - Each user should access to its own virtual desktop. Is the Second Life viewer supported in AppStream? It looks like one of the Graphic instances would be required but which one? My customer has approximately 50 users who could access Second Life throughout the day. What AppStream setup would be recommended for supporting these 50 users?

Hi, in AppStream the 'My Files' window opened from the top toolbar has options for a user to Upload, Download and Rename files but I don't seen an option for a user to delete files. Is there a way of enabling a delete option so a user can easily delete files they've uploaded? Thanks, Steve

I'm experimenting with AppStream and so far loving what I see, We've hit a couple of snags which I'm posting as separate threads for ease of discovery. When I connect to the ImageBuilder and install my application, I am able to enable the microphone in the browser, and I see that the LineOut Loopback device registers my microphone activity / voice. Ut also then works correctly in my application. However, if I create a share URL for the ImageBuilder and connect using that, the same steps do not work - the microphone activity is never registered. Similarly if I create and fleet and stack from my image and then generate a URL, when I connect via that URL the same steps (enable microphone, check LineOut loopback device levels etc) do not work in the user instance I connect to. Not sure if this is a clue or relevant, but when I'm setting up the image builder and I switch users back from the Template User to Administrator, I get a popup saying that my microphone device is not accessible - even though I had used it during the same session. Could it be that it only works for Administrator for some reason?

We're interested in using AppStream to provide something like the free trial that AppStream already provides, but for our own application and for arbitrary numbers of users that are not necessarily known beforehand. For example, someone wants to try our software, we send them a link and they can simply click and try in the browser. I've had a browse of the docs and I'm not yet sure I see a way to assemble this kind of system with AppStream. I guess we'd need a pool of instances where we start new instances in the background when no more are available so that we don't have to have a huge number 'always on'. We'd also need a way to allocate users as I think a single user can only run one application right? How possible is this to achieve with AppStream as it stands today?

Hi everyone - I'm struggling a bit with the user directory structure in AppStream 2.0 during a user session. The documentation says that the user folder is: C:\Users\PhotonUser\My Files\Home Folder In my application (running a session as a user), when I browse to the user folder, the path returned is: D:\PhotonUser\My Files\Home Folder I don't see this path anywhere in the documentation. How do I get AppStream 2.0 to configure the correct drive/folder for my users as shown in the documentation? Thanks, Gregg

Hi, I have an AppStream 2.0 application that sometimes saves large data files to the stream file system (~100MB). It is having a hard time doing so and failing with "Not Enough Drive Space" errors. How can I either allocate more drive space or correct this behavior if the drive space is effectively infinite? -cneller

Hello, Have few queries regarding AS2 which are listed below. Thanks in advance. 1. AS2 User Pool – Do we have script which allows administrator to create multiple users (e.g. 100) in AS2 User Pool with input parameter as First Name, Last Name, email address, streaming link start date & end date? 2. AS2 User Pool – I have multiple AS2 streaming URL and would like to associate each streaming URL to group of users in User Pool. I don’t see any option to create Group within User Pool. How do we solve this problem? 3. AS2 Streaming link – I am looking at potential customer who provides learning to internal team and needs Streaming link validity for 30 days. I know, maximum streaming link validity is 7 days. Customer don’t want to use SAML (they are happy with User Pool in AS2). What is the alternate here? 4. AS2 User Pool – when user is created in User Pool, user receives email with streaming detail, username and password. Can we customize email content which is sent to the user of User Pool? Regards, Wasim

A customer wants to know whether the Simulation Package is included with NX Siemens License using AppStream2.0. In the demo version it wasn't included apparently hence the question.

My customer is interested to migrate their Microsoft Dynamics AX into AWS. Currently they use GraphOn to provide client app streaming to users. Is Appstream 2.0 suitable to replace GraphOn? Has it been tested or is there success story of a customer using Appstream 2.0 for Dynamics AX client? Please advise. Thank you.