Armoury Crate only working with administrator accounts

[jaydude]

Why does Armoury Crate require admin user to be logged in?

For security purposes I always use a regular Windows user account as my daily driver. When I try to use Armoury Crate with that user and access my ROG Falchion keyboard's settings, it doesn't open. If I login with my admin account and open Armoury Crate everything works fine.

ASUS needs to correct this security flaw that you are only able to use Armoury Crate if you have admin account logged in.

[posterberg]

I have a domain joined Windows 11 Pro computer.

Armory Crate does not work with a normal user account. It just works with the local administrator (not domain admin) account that I had on the computer before joining the domain. This is not an account that I normally use, and it is disturbing to have to revert to that when I occasionally want to use Armory Crate.

I did try to use the metioned task scheduler tricks, but were out of luck.

[krege1]

I have also tried the task scheduler changes; no luck. I downloaded all these AURA desktop backgrounds that I can only see when I am logged in with my admin account.

If I modify the user to an "admin" user, AURA works fine but that is not what I want at the end of the day.
I can see having some of the functionality in Armour restricted to "admins' only but why can't they have AURA run under any type of user/rights makes no sense!!!
Aura should be able to run under regular "non-elevated-rights" users!!! :confused: 😞 :mad:

[posterberg]

krege1 wrote:
I have also tried the task scheduler changes; no luck. I downloaded all these AURA desktop backgrounds that I can only see when I am logged in with my admin account.

If I modify the user to an "admin" user, AURA works fine but that is not what I want at the end of the day.
I can see having some of the functionality in Armour restricted to "admins' only but why can't they have AURA run under any type of user/rights makes no sense!!!
Aura should be able to run under regular "non-elevated-rights" users!!! :confused: 😞 :mad:

I totally agree, it's really a shame that Asus hasn't been able to solve the problem after all this time.

It should also be possible to pop-up a password dialog when the app starts so only that app has to run with elevated privileges when it is started, or when functions requiring privilege elevation.

Come on Asus!

[SkyBeam]

posterberg wrote:
I totally agree, it's really a shame that Asus hasn't been able to solve the problem after all this time.

I can second this and confirm the issue is still present.
Even the amount of tools you need is confusing but also Armoury Create being an absolutely huge software installing not only a bunch of task scheduler tasks but also quite a number of Windows services is quit annoying. Also from security perspective it's scaring me to have all those services running with System privileges. Moreover it's absolutely impossible to run the software without admin rights and even worse it does not even allow to be installed as local admin and only use it when needed (by switching the account) as it will try to launch multiple processes via task scheduler on user logon even on non-admin users and cause UAC dialogs to pop up.

It's really painful and as a result I have uninstalled all of the Asus tooling immediately again. Using simple OpenRGB now to set LED colors on my Aura headers. Not even admin rights required any more just to set LED colors.

[cindernat]

The problem is though is that Armoury is required to update any of the hardware, which for one of my PCs is everything! Mobo, GPU, AIO - so really need it working. Also the ROG Ryujin II's display won't load up without Armoury running correctly, and I like to have CPU temps displaying on it.

[posterberg]

Nate152 wrote:
Hi jaydude,

I ran into someone the other day here with the framework service not responding. Unfortunately, since I haven't experienced this I don't know of a quick fix but the solution for him was to reinstall windows.

He did the free upgrade to windows 11. This will fix you, a couple hours and you'll be done.

Does Moderator mean that you are working for Asus support? If so, don't you have a lab where you can test run this? Domain joined computers aren't that unheard of...

[SignedAdam]

Obviously it isn't just me, is it @Nate152, 

I'll just quote what you said in my post here :

"After talking with the ASUS tech team.....

Armoury Crate does require administrative privileges to access hardware devices, they don't want just any user to be able to access your hardware.

Thank you for understanding."

So basically everyone, if we want this software to function in standard accounts "which is the safest way to use windows for a normal user and the recommended way" we are going to have to have more people moan about this to them, to get an expected function to work it really should be a given that standard accounts can open this software, I'd go as far to say Asus isn't supporting Microsoft Windows properly which it lists as being compatible with .. I mean Asus can't even argue this software is downloaded anymore and optional as they have integrated are installer in to the bios its self now days, 

This software is so broken with standard accounts that you can't even right click it and say run as administrator... It just goes in to an install loop which you will see in my post in a video, you don't need to see the video though just try it yourself, it's still broken today