leastprivileges
Hello,
I was wondering if you are still updating SuRun?
Will the 1.2.2.1 beta version ever become final?
Are you planning Windows 10 support?
Thank you.
Kay
Hello LeastPrivileges,
you're right in that i should make the current beta final.
I'll update SuRun for Windows 10 when I get my hands on the RTM to install it in a VM.
My spare time came down to a few hours a day and I can't motivate myself to work on SuRun after work.
I think that I don't find the time to include the rest of my ideas into SuRun anymore.
I think SuRun was a "must have" for Windows XP but starting with Windows 7 it more and more became a "nice to have" program.
I hope to be able to release 1.2.1.0 final next week. (Rename the beta, remove the debug output, update readme and home page).
leastprivileges
Hello Kay,
Thank you for your reply. And, as always, thank you for all your hard work.
I believe your program SuRun is still a "must have" for any Windows version when it comes to security these days. Despite security improvements in Windows 8 and Windows 10, a limited user account using AppLocker or Software Restriction Policies is still very important in your overall security configuration.
As long as there are some programs that will not function normally on a limited account, I think SuRun will always be a necessary addition to Windows security. Thanks again. :-)
claudio-salvio
Hello Kay,
I strongly agree with LeastPrivileges respect of the importance of SuRun.
In case of Non-Admin Users, SuRun is still very necesary.
If you're thinking about interrumpting the SuRun development, I'd like to make a suggestion.
You could setup a crowd-funding project on a website. This project could mean for example, that if you reach a certain ammount of money donations, you will release the source code under some kind of liscence.
This way, you could stop your development, keep the product alive and growing, while getting some kind of compensation for the effort you made creating this great program.
Finally I would like to thank you for everything you've done on this project, I honestly believe that SuRun is a really useful tool.
Greetings,
Claudio
sennator
Hallo Kay,
finde ich klasse dass du nach SuRun nach langer Zeit nochmal aktualisiert und kompatibel zu aktuellen Windows-Versionen gemacht hast. Gerade zufällig entdeckt!
War unter XP jahrelanger Fan (und Verfechter!) des Tools, aber mit dem Wechsel auf Windows 8 war es dann eher "Nice-To-Have" geworden und ohne Freigabe habe ich es auch lieber sein lassen. Dennoch haben mir immer einige liebgewonnene Features gefehlt wie z.B. App neustarten als SU oder eine Zentrale Stelle zur Konfiguration der SU-Anwendungen. -> SuRun wird jetzt zeitnah wieder eingerichtet!
Daher nochmals: Big Up von meiner Seite!
Kay
Habe im Februar SuRun 1.2.1.1 schon als final freigegeben.
Heute habe ich die Hooks an Windows X angepasst.
Die Anpassung war nur in einer Code-Zeile. Deshalb habe ich SuRun Version 1.2.1.2 heute direkt freigegeben.
leastprivileges
Hello Kay,
Thank you so much for SuRun v1.2.1.2
It has been working well on Windows 10 (x64).
Thanks again for all your hard work.
Kindest Regards
jon
Hi Kay,
Klasse das SuRun schon für Windows 10 kompatible ist.
Habe es soweit getestet und läuft alles wie es soll :-)
Weiß nicht ob es wichtig ist aber das Manifest von den Surun Binaries ist noch veraltet.
Es fehlt die "supportedOS Id" für Windows 10.
https://msdn.microsoft.com/de-de/library/windows/desktop/dn481241(v=vs.85).aspx
Kay
...oh, oh: Das Manifest. :huh:
Ich vergaß das zu aktualisieren, was aber keine Auswirkungen zu haben scheint.
Ich vermute, dass M$ Win81 und WinX (bisher) gleich einstuft.
Ich habe klammheimlich SuRun 1.2.1.2 mit einem neuen Manifest versehen und die bisherige Version damit ersetzt. ;-)
leastprivileges
Hello,
I noticed with SuRun v1.2.1.2 on Windows 10, when you add a user to the SuRunnners group, the SuRun user is added to the Windows 'SuRunners' group by default, however, the SuRun user is not added to the Windows 'Users' group and the SuRun user is not removed from the Windows 'Administrators' group.
I have to add the SuRun user to the Windows 'Users' group and remove the user from the Windows 'Administrators' group manually after installing and configuring SuRun.
Is this by design in SuRun or is this a possible bug? Thanks.
Kay
Hello LeastPrivileges,
this behavior is by intention.
When adding a user to 'SuRunners', SuRun checks if this user is a "split admin", an admin that usually runs apps with limited privileges under UAC.
If a "split admin" is added to 'SuRunners', SuRun does not remove it from 'Administrators'.
leastprivileges
Okay, now I understand. Thanks for the explanation. Would you recommend adding the SuRun user to the Windows 'Users' group manually for extra security?
Kay
Whoops, forgot to answer :blush:
I have no clear recommendation.
I think both (split Admin or standard User) is more or less the same but slightly different colored safety level.
Using Windows with SuRun is IMHO not safer than using Windows with UAC.
Software usually cannot bypass the UAC or the SuRun screen because the user needs to use KeyBoard or Mouse to elevate a Process.
If you want to protect your Windows against foreign human interaction, using a standard user would make UAC always ask for Administrator credentials, so no one could compromise your system without a password.
On the other side you often need to enter a user name and password, so others could spy that.
If you need protection against bad software, using a split admin account is just fine.
You don't need to enter a password and others can't read it.
leastprivileges
Okay, thank you for your reply. When it comes to UAC I have never trusted it by itself as a security wall against unwanted malware execution. I still believe in a Standard (Limited) user account along with Software Restriction Policies in place. I use SuRun as a Whitelist tool to elevate privileges for various programs that don't run well in a Standard user account. When I install SuRun, I always make sure the user is a member of the 'Users' group. Thus, I always disable UAC. Starting with Windows 8, with the UAC slidebar all the way down, UAC is still enabled in the registry under policies\system. Windows 10 is the same. This is a change from Windows 7. If you disable the UAC registry setting in 8 or 10, the Windows Apps will be disabled by default. This can be annoying when trying to make changes to many workstations with UAC still enabled in the registry.
sennator
Hallo Kay,
noch ein kleines Feedback:
unter Windows 10 gibt (glaube erst seit dem Update 1511 oder 1607) ein kleines Problem im IE: wenn man als SuRunner einen Download direkt öffnet, stürzt der Browser ab. Speichern allein funktioniert, aber sobald man aus dem Browser heraus öffnet, knallt es reproduzierbar.
Als Administrator oder Benutzer ohne SuRunners-Gruppe hingegen problemlos. Auffällig ist auch dass man den IE nicht mehr via Rechtklick als Administrator (neu) starten kann - ich meine, anfangs ging das noch.
Vermutlich entwickelst du SuRun nicht mehr aktiv weiter, aber vielleicht hast du trotzdem mal Zeit dir das anzuschauen, könnte ja evtl. nur ne Kleinigkeit sein...
Danke & Grüße
Kay
...besser spät als nie:
Bin zum Fehlersuchen gekommen und wurde fündig.
SuRuns IAT-Hook hat den Fehler verursacht.
Ich habe das hier bereits behoben.
Es wird sehr bald ein SuRun 1.2.1.3 mit dem Fix geben, das dann auch endlich eine digitale Signatur hat.
Danke für den Report! :-)
sennator
Super!
Wann ist denn bald? ;)
Kay
Bald war eigentlich schon, stecke (beruflich) im Jahresendstress und komme nicht dazu, SuRun fertigzustellen.
...anbei ein SuRun 1212 mit verbessertem Verhalten.
Zur Fertigstellung der Version 1.2.1.3 möchte ich noch den moderierten Benutzer implementieren.
Das bedeutet, dass wenn ein Benutzer nur bestimmte Programme mit SuRun starten darf, SuRun bei anderen Programmen nach einem echten Admin Passwort fragt, anstatt den Programmstart direkt zu verweigern.
leastprivileges
Wonderful! The admin password prompt will be a great new feature. Thank you Kay!