Masquerade Feature Summary


Masquerade is a heavy-duty RunAs utility for Windows which helps you securely deploy applications that assume specific user access to other user accounts. Passwords are never revealed to other users and do not need to be entered at run-time. This allows Administrators to give others access to run privileged applications while preserving your system's existing security configuration. And, Administrators and Power Users can more easily be on guard by choosing how they expose themselves to unfamiliar applications or when accessing the internet.

Perhaps you are thinking, 'Why should I bother with this? No one uses my computer except me.' The answer comes directly from Microsoft®:
       Why you should not run your computer as an administrator
You operate Masquerade from a main form to build shortcuts and registry entries, and to document application settings for yourself or others. Applications, commands, batch files, scripts -- If it's executable, run it with Masquerade:


( Click to enlarge )


You can script and build on what you and others have done before, by re-loading your earlier settings or the settings of others when made public:


( Click to enlarge )


This is possible since the settings for your applications are managed from a central location. This centralized approach allows Masquerade™ to also offer:
Security is a key feature of Masquerade™ and is integrated into every part of its operation:
  • Anti-Tampering
    Internal integrity checks are used to ensure that all critical application settings are protected from external alteration. Also, Masquerade employs a series of advanced techniques to resist reverse-engineering and memory-mining. Such methods include just-in-time decryption and symbol obfuscation, as well as metadata changes to prevent exposures from .NET reflection.


  • Authorized Users Only
    The user must have the right to log on locally and be authenticated by the domain or local machine. This is checked each time an application is run under that account. Out-of-Bounds requests are rejected.


  • CRC Fingerprinting
    Target applications can be 'fingerprinted' to ensure that they are not replaced, or upgraded to another version, without your approval.


  • 'Hold Harmless' Deployment
    Shortcuts, registry entries and scripts using Masquerade do not need to contain any user names or passwords, so they do not require additional audit or business controls. Such sensitive data is encrypted in a centralized location for easy management.


  • Encryption
    Masquerade employs several types of encryption including RSA encryption for user names and passwords and Triple DES encryption for the integrated backup and restore features. Other encryption techniques are employed by the anti-tampering safeguards.
  Home