Anyone Use RAAC?

Just found this here. Considering using that and putting UAC on full and keeping PrevX SOL and AVG or Immunet Protect Plus.

Anyone have any insight about the program, process, theory behind it, if it actually works, free alternatives, etc.?

http://www.pcmag.com/article2/0,2817,2364105,00.asp

 

Looks like a great app...

 

Yes, interesting concept. I did check for a freeware but found nothing.

Btw, what would mean:
"It's also important to note that RAAC runs programs under the System account. This is not the same as elevating a user account" ?

Wider spectrum of admin privileges this way?

 

Sounds to me like they run under a full admin account with UAC enabled. Only the programs listed in RAAC can run as admin.

 

It's probably related to this note that I had overview at first read:

"NOTE: Apps launched by RAAC are run under the 'real' administrator account. This might cause some unexpected consequences. For example, if you select an app such as FireFox, and use the built-in Win7 Run As Administrator to launch it, all your settings are still there (bookmarks, etc) and Firefox is now running as an elevated process. If you use RAAC to run it, Firefox is running under the System account so none of your settings are loaded for that app."

 

I wonder how it's possible for this program to work? Seems like it reveals a new attack vector for malware to bypass UAC.

 

It sure does, but it looks as though it can't be trialed, having to be bought first, or does someone know of a trial download? it's only $8, so if it works as advertised, I'd buy it for sure.

 

You could try emailing the coder here:

http://www.seamistsoftware.com/contact.aspx

 

Good idea, thanks!

 

Is this safe?

 

You white list programs. Only programs you put on the white list that need admin privileges will be elevated.

I fund a similar free version. Im going to go ahead and try this out:

http://www.start64.com/index.php?option=com_content&task=view&id=4639&Itemid=145

 

How did this go for you, whitedragon?

This isn't working the way I expected when tested in the vm; it creates shortcuts only for the admin account, even though I selected the option to install for Everyone. It puts the two shortcuts in the user accounts start menu but when launching them i get digital signature of setup.msi was rejected I ended launching them from the program's directory as administrator which worked but then of course the shortcuts I create are placed only in the admin's account desktop.

 

I believe its meant to be used on an admin account with UAC enabled. It creates a program shortcut that bypasses the UAC prompt.

 

I'm hoping for something similar to SuRun, where a selected standard account can launch selected apps automatically with admin rights, eliminating the need to provide credentials every time.

 

Thats basically what RAAC does. From the looks of it you create a whitelist that will allow any program on the list to run as admin without the UAC prompt.

 

Hopefully it works that way from within a standard account. I've emailed the author asking about that functionality as well as a trial use.

 

There's another similar program mentioned in https://www.wilderssecurity.com/showthread.php?t=279244.

 

Its the same program. However it doesnt do what we are looking for.

 

I'm happy to report RAAC works as I'd hoped it would under a Standard account. The author had emailed, ensuring me it works under a Standard account. It's $8 well spent imo Thanks again whitedragon for the tip on this utility.

 

Did you ever get a trail of the software?

 

I also asked them for a possible trial, will see what it will give.

 

How is it in terms of resource usage? Does it startup with the PC as a program or service or neither?

 

Answers in screenshots. A service does start as well as an application.

from the RAAC Help file:

 

I've read the info on the link to this app. It seems as though it's selling point is for apps that are blocked by UAC on startup. Why the need to use an extra app for this?

 

An example might be Secunia's PSI, where it needs admin privileges to run, so RAAC could start it this way in a LUA account. Others might be, for example, running the command line as admin or updating antivirus defs such as my free MBAM app, or Java. This way I don't need to type credentials every time. I have the AppLocker rule that allows only my LUA account to use RAAC.