Frequently asked questions Frequently asked questions FAQ

Frequently asked questions

What sets Runasrob apart from other runas tools?
Unlike other runas tools, Runasrob does not merely assign stored user rights to an application. It can launch programs under the System account, grant administrator privileges to standard user accounts for specific applications, or run applications as a service before a user logs into the workstation.
Whether you want to install an update under the System account, run specific applications with elevated privileges for greater security, or allow a colleague covering for you during your vacation to launch a program under a different user identity, Runasrob provides the right solution for each of these scenarios.

How does Runasrob differ from Privileged Access Management (PAM) solutions?
Unlike complex Enterprise PAM solutions from major vendors, which require deep system integration, heavy maintenance, and significant budgets, Runasrob offers a lightweight and highly adaptable approach. It delivers targeted privilege elevation without the high cost and operational overhead of traditional PAM systems.

How secure are Runasrob or Runasspc?
Runasrob employs AES encryption, anti-debugging protection, and numerous other security measures. Unlike traditional runas tools, Runasrob does not rely on stored credentials that could be intercepted. For detailed information on our security architecture, please visit:
https://robotronic.net/securityen.html

Which operating systems are supported?
The tools run on Windows XP through Windows 11 and Windows Server 2012 through 2025.

Is Microsoft Entra ID supported?
Yes, RunAsRob and RunAsSpc are compatible to Azure AD and Entra ID.

How does the free personal use version differ from the licensed version?
The unlicensed version occasionally shows a startup pop-up with license information. Aside from this notification, the functionality is identical. We reserve the right to restrict unlicensed usage at any time.

Can we bypass the UAC dialog?
Yes, UAC can be bypassed by choosing the logon option as SYSTEM in RunAsAdmin of RunAsRob.

Program is not run as administrator, whats wrong?
Your application, command, batch file, older software, or script is not requesting elevated privileges on a UAC-enabled system. To request elevated privileges for an application that does not do so itself, you can:

What can I do if the authorized application is not found?
Authorize the full path of the application, as relative paths can vary depending on where the command is called from. Additionally, ensure the user has access to the authorized application by setting read permissions for the allowed folder.

Which kinds of applications can I authorize?
The tools Runasrob and Runasspc are compatible with most file extensions, such as *.exe, *.msi, *.bat, *.cmd, *.wsh, *.vbs, *.msc, and more.
Any unsupported file or script can easily be launched using a simple one-line batch file executed through RunAsSpc.

How do I fix the open file security warning for RunAsRob or RunAsSpc?
Windows displays a security warning for files executed from network locations or downloaded from the internet. You can disable this warning for RunAsRob, RunAsSpc and other applications in two ways:
1. Uncheck "Always ask before opening this file" when the warning prompt pops up.
2. Right-click to RunAsRob.exe or RunAsSpc.exe, go to Properties, and check the Unblock option at the bottom of the General tab.

How can I suppress errors and other messages?
Error messages can be suppressed using the /quiet switch, for example:
>> runasspc.exe /cryptfile:“path/cryptfile.spc“ /quiet <<
Please refer to the included text file CommandLineArguments file for more details and available commandline arguments.

Can I use environment variables?
Yes, environment variables are supported. Example: %windir%\system32\CompMgmtLauncher.exe

Are mapped drives supported?
UNC paths are supported, but mapped drives are usually not.
This is because mapped drives are tied to a specific user account. If you start an application under a different account, those mapped drives will not be accessible.

Are wildcards supported in file paths?
Yes, wildcards can set as authorized path. Example: \\Server*\updates\myUpdateVersion*.exe

How can I authorize only specific users or groups to run an application?
You can restrict access by adjusting NTFS permissions for the program executable, the encrypted script, or the target directory. Only selected users or groups with Read & Execute permissions will be able to launch the application.

Can I pass arguments to the authorized application?
Yes. To prevent unauthorized execution, allowed arguments must be predefined exactly or via wildcards within the configuration.
If complex arguments or quotation marks cause syntax errors, use a workaround: place your full command-line call inside a single-line batch file and authorize the batch file in RunAsRob.

Where can I find a list of error codes and their meanings?
Most error messages are standard Windows system errors forwarded directly by RunAsRob. You can find a complete list of these system error codes and their explanations on Microsoft
https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes


Contact:

For any suggestions, errors, questions, specific requirements, or adjustments, please contact:
runas@robotronic.net


License:

RunAsRob is free for private use only.
For companies and other organizations, we offer a licensed version registered to the organization name.
Order RunasRob >>>

Download RunasRob >>>


Date: 2026-10-16

Data protection

Imprint