Anyone Use RAAC?

[whitedragon551]

Just found this here. Considering using that and putting UAC on full and keeping PrevX SOL and AVG or Immunet Protect Plus.

Anyone have any insight about the program, process, theory behind it, if it actually works, free alternatives, etc.?

http://www.pcmag.com/article2/0,2817,2364105,00.asp

[sg09]

Looks like a great app...:)

[ruinebabine]

Yes, interesting concept. I did check for a freeware but found nothing.

Btw, what would mean:
"It's also important to note that RAAC runs programs under the System account. This is not the same as elevating a user account" ?

Wider spectrum of admin privileges this way?

[whitedragon551]

Sounds to me like they run under a full admin account with UAC enabled. Only the programs listed in RAAC can run as admin.

[ruinebabine]

It's probably related to this note that I had overview at first read:

"NOTE: Apps launched by RAAC are run under the 'real' administrator account. This might cause some unexpected consequences. For example, if you select an app such as FireFox, and use the built-in Win7 Run As Administrator to launch it, all your settings are still there (bookmarks, etc) and Firefox is now running as an elevated process. If you use RAAC to run it, Firefox is running under the System account so none of your settings are loaded for that app."

[Victek123]

-{ Quote: "Just found this here. Considering using that and putting UAC on full and keeping PrevX SOL and AVG or Immunet Protect Plus.

Anyone have any insight about the program, process, theory behind it, if it actually works, free alternatives, etc.?

http://www.pcmag.com/article2/0,2817,2364105,00.asp" }-

I wonder how it's possible for this program to work? Seems like it reveals a new attack vector for malware to bypass UAC.

[wat0114]

-{ Quote: "Looks like a great app...:)" }-

It sure does, but it looks as though it can't be trialed, having to be bought first, or does someone know of a trial download? it's only $8, so if it works as advertised, I'd buy it for sure.

[whitedragon551]

-{ Quote: "It sure does, but it looks as though it can't be trialed, having to be bought first, or does someone know of a trial download? it's only $8, so if it works as advertised, I'd buy it for sure." }-

You could try emailing the coder here:

http://www.seamistsoftware.com/contact.aspx

[wat0114]

-{ Quote: "You could try emailing the coder here:

http://www.seamistsoftware.com/contact.aspx" }-

Good idea, thanks! :)

[Konata Izumi]

-{ Quote: "It's also important to note that RAAC runs programs under the System account. This is not the same as elevating a user account." }-

Is this safe? :doubt:

[whitedragon551]

-{ Quote: "Is this safe? :doubt:" }-

You white list programs. Only programs you put on the white list that need admin privileges will be elevated.

I fund a similar free version. Im going to go ahead and try this out:

http://www.start64.com/index.php?option=com_content&task=view&id=4639&Itemid=145

[wat0114]

-{ Quote: "
I fund a similar free version. Im going to go ahead and try this out:
" }-

How did this go for you, whitedragon?

This isn't working the way I expected when tested in the vm; it creates shortcuts only for the admin account, even though I selected the option to install for Everyone. It puts the two shortcuts in the user accounts start menu but when launching them i get digital signature of setup.msi was rejected :( I ended launching them from the program's directory as administrator which worked but then of course the shortcuts I create are placed only in the admin's account desktop.

[whitedragon551]

I believe its meant to be used on an admin account with UAC enabled. It creates a program shortcut that bypasses the UAC prompt.

[wat0114]

I'm hoping for something similar to SuRun, where a selected standard account can launch selected apps automatically with admin rights, eliminating the need to provide credentials every time.

[whitedragon551]

Thats basically what RAAC does. From the looks of it you create a whitelist that will allow any program on the list to run as admin without the UAC prompt.

[wat0114]

-{ Quote: "Thats basically what RAAC does. From the looks of it you create a whitelist that will allow any program on the list to run as admin without the UAC prompt." }-

Hopefully it works that way from within a standard account. I've emailed the author asking about that functionality as well as a trial use.

[MrBrian]

-{ Quote: "I fund a similar free version. Im going to go ahead and try this out:

http://www.start64.com/index.php?option=com_content&task=view&id=4639&Itemid=145" }-

There's another similar program mentioned in http://www.wilderssecurity.com/showthread.php?t=279244.

[whitedragon551]

-{ Quote: "There's another similar program mentioned in http://www.wilderssecurity.com/showthread.php?t=279244." }-

Its the same program. However it doesnt do what we are looking for.

[wat0114]

I'm happy to report RAAC works as I'd hoped it would under a Standard account. The author had emailed, ensuring me it works under a Standard account. It's $8 well spent imo :) Thanks again whitedragon for the tip on this utility.

[whitedragon551]

Did you ever get a trail of the software?

[ruinebabine]

I also asked them for a possible trial, will see what it will give.

[whitedragon551]

-{ Quote: "I'm happy to report RAAC works as I'd hoped it would under a Standard account. The author had emailed, ensuring me it works under a Standard account. It's $8 well spent imo :) Thanks again whitedragon for the tip on this utility." }-

How is it in terms of resource usage? Does it startup with the PC as a program or service or neither?

[wat0114]

-{ Quote: "How is it in terms of resource usage? Does it startup with the PC as a program or service or neither?" }-

Answers in screenshots. A service does start as well as an application.

from the RAAC Help file:

-{ Quote: "RAAC consists of two parts, a service and an application interface. The interface allows you to select which programs will launch with Windows and additionally adds them to the launcher in the system tray. The service portion of RAAC is responsible for launching the programs under the System account. " }-

[Greg S]

-{ Quote: "Answers in screenshots. A service does start as well as an application.

from the RAAC Help file:" }-
I've read the info on the link to this app. It seems as though it's selling point is for apps that are blocked by UAC on startup. Why the need to use an extra app for this?

[wat0114]

-{ Quote: "I've read the info on the link to this app. It seems as though it's selling point is for apps that are blocked by UAC on startup. Why the need to use an extra app for this?" }-

An example might be Secunia's PSI, where it needs admin privileges to run, so RAAC could start it this way in a LUA account. Others might be, for example, running the command line as admin or updating antivirus defs such as my free MBAM app, or Java. This way I don't need to type credentials every time. I have the AppLocker rule that allows only my LUA account to use RAAC.

[Greg S]

-{ Quote: "An example might be Secunia's PSI, where it needs admin privileges to run, so RAAC could start it this way in a LUA account. Others might be, for example, running the command line as admin or updating antivirus defs such as my free MBAM app, or Java. This way I don't need to type credentials every time. I have the AppLocker rule that allows only my LUA account to use RAAC." }-
Will not Scheduled Tasks work for these startups? I use it for apps that will not run on startup due to UAC. Example of two that come to mind

E:\Windows\System32\schtasks.exe /run /tn HDTune
E:\Windows\System32\schtasks.exe /run /tn peerblock


http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html

[wat0114]

-{ Quote: "Will not Scheduled Tasks work for these startups? I use it for apps that will not run on startup due to UAC. Example of two that come to mind

E:\Windows\System32\schtasks.exe /run /tn HDTune
E:\Windows\System32\schtasks.exe /run /tn peerblock


http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html" }-


Right, but two things:

1. Doesn't this work under admin accounts only?

2. With RAAC one can manually launch programs only when needed. It's not always desirable to have a program launch at startup

[MrBrian]

Free solutions for standard account:
How to run a program elevated at startup in a standard account when UAC is enabled (http://www.wilderssecurity.com/showthread.php?t=280471)
Avoid UAC prompts by using an elevated program launcher (http://www.wilderssecurity.com/showthread.php?t=273769)

[Sadeghi85]

-{ Quote: "An example might be Secunia's PSI, where it needs admin privileges to run, so RAAC could start it this way in a LUA account. Others might be, for example, running the command line as admin or updating antivirus defs such as my free MBAM app, or Java. This way I don't need to type credentials every time. I have the AppLocker rule that allows only my LUA account to use RAAC." }-

SuRun can be used for all that, is there any advantage to use this over SuRun?

[wat0114]

-{ Quote: "SuRun can be used for all that, is there any advantage to use this over SuRun?" }-

Does it support Windows 7? When I tried SuRun a few days ago it wouldn't even install in Win7.

[Greg S]

-{ Quote: "Right, but two things:

1. Doesn't this work under admin accounts only?

" }-
Good question and one I don't know a for sure answer to. I was under the impression that it would. The task would have to be created from within an Admin account though.

[whitedragon551]

I dont think it does. Before I found RAAC I tried SuRun and I couldnt get it to work.

[Greg S]

-{ Quote: "I dont think it does. Before I found RAAC I tried SuRun and I couldnt get it to work." }-
I think I read here at Wilders that there is a Beta version that works with Win 7

[wat0114]

-{ Quote: "Good question and one I don't know a for sure answer to. I was under the impression that it would. The task would have to be created from within an Admin account though." }-

It looks like it won't...

-http://www.wilderssecurity.com/showpost.php?p=1686014&postcount=14

[Sadeghi85]

-{ Quote: "Does it support Windows 7? When I tried SuRun a few days ago it wouldn't even install in Win7." }-

The version that supports Windows 7(1.2.0.9) is in beta atm but it works ok(I'm using it). Beta 14 (http://forum.kay-bruns.de/post/2872#reply_10_cont) is the latest, give it a try.

[wat0114]

-{ Quote: "The version that supports Windows 7(1.2.0.9) is in beta atm but it works ok(I'm using it). Beta 14 (http://forum.kay-bruns.de/post/2872#reply_10_cont) is the latest, give it a try." }-

Thanks, I'll try it!

[wat0114]

-{ Quote: "Thanks, I'll try it!" }-

It works fine under the admin account in the vm but not under a standard account. Something about an unloaded SuRun-related .dll file. I'd really like to see SuRun work because it does more than RAAC.

[Sadeghi85]

Use blacklist button in "Execution hooks" tab. btw you can report bugs here: http://forum.kay-bruns.de/forum/8

[wat0114]

-{ Quote: "Use blacklist button in "Execution hooks" tab. btw you can report bugs here: http://forum.kay-bruns.de/forum/8" }-

Okay I'll give that a try and report any bugs. I'm glad to see SuRun in Win7 beta.

[wat0114]

Sadeghi, the culprit was Rundll32.exe. After blacklisting SuRun works fine so far in my Standard account :) Thanks so much for your help! What I love about this is I can, for example, Run: surun wf.msc or better yet right-click on start menu entry and select run as administrator and this opens win firewall's advanced settings without needing credentials. Very nice. Seems light on resource usage too. whitedragon, you may want to give this a try, even though it's still beta.

[Sadeghi85]

Cool 8)

btw is there a trial version for RAAC? I'd still want to try it.

[whitedragon551]

-{ Quote: "Cool 8)

btw is there a trial version for RAAC? I'd still want to try it." }-

There is no trial for it. If you want to use it you have to buy it. ::)