Running as a LUA

Hi

My first visit here. I happened to stumble across the the LUA/SuRun threads a short while back see:

(https://www.wilderssecurity.com/showthread.php?p=1185641#post1185641)

and was impressed enough to set up my system accordingly. I am now checking that all is set up correctly on my PC and have just run AccessEnum (very useful)

I have discovered that I have a couple of applications that broke the rules when installed as regards not allowing Write permission to C:\Program Files and C:\Windows

For instance I have a USB TV Stick App from Pinnacle that gives Everyone full Control over the following folders / files

C:\Program Files\Pinnacle\Mediacenter
C:\Program Files\Pinnacle\Shared Files

I thought this would blow a great big hole in my security but after copying another .exe to these folders I found to my surprise that I still could not execute it due to the SRP kicking in Whilst this is what I would like I cannot understand why this app refuses to execute when those that are already here run properly (As I understand the SRP as given in the above threads gives execute permission only to C:\Program Files and C:\Windows)

So how important is it for me to try and fix these permissions (if that is possible to still keep the program running properly. I am having a few problems with it as an LUA anyway at the moment) and does it matter anyway with the SRP in place

Thanks

Mike

 

Have you tried right-clicking the program and choosing "Run as"?

 

If I Rtclick and Run As I get 2 options

1) Administrator. This runs OK after I enter Admin password

2. Current User (LUA). This does not allow the program to run However I do have 2 options determined by a check box which says Protect my computer and data from unauthorised program activity With it checked I get 'Can not create temp folder archive but with it deselected the SRP prevents it opening properly as originally described

Thanks

Mike

 

Has Pinnicle tech support said whether they support this application running under a limited account? Some of their products will run with restricted rights but others won't.

 

Since I last posted I have checked some other stuff and it would appear that all is actually working as I would expect it to. My choice of how I tested this issue was unfortunately not the best way. Of course this still leaves the problem of trying to run Pinnacle as an LUA but that I can deal with

Thanks anyway

Mike