06: How to install and run MYKI Password Manager as regular user when SecureRun is enabled

Option 1: Use Least Privilege Manager to Elevate the install of MyKi Password Manager for the standard user. Note: This option requires less rules to be created than option 2.

1. Create a new Least Privilege Manager policy on either the Computer or User side then add a new Executable policy for the downloaded MyKi installation EXE (i.e., MYKI-latest.exe).  Choose the “use combo rule (advanced) option, then select only Signature and File Info before clicking Next.
   

2. Under the “Combo condition” > “Select reference file” drop down, choose “From EXE file” then browse to and select the “MYKI-latest.exe” file. Answer “Yes” when prompted “Do you want to automatically fill the values from the selected file for file conditions?”, then click Next to continue.

   

3. At the LPM – Select Action screen leave the defaults in place then click Next.

   

4. At the LPM – Settings screen choose “User and System processes" under Scope and then click Finish.

   

5. Next, add a new Executable policy, again choose the “use combo rule (advanced)" option, then select only Signature and File Info before clicking Next.

   

6. Under the “Combo condition” > “Select reference file” drop down, choose “From EXE file” then browse to and select the following file “%LocalAppData%\myki\MYKI.exe”. Note: This file can be found at the specified location only after a successful MyKi installation.
    

7. Answer “Yes” when prompted “Do you want to automatically fill the values from the selected file for file conditions?”, then click Next to continue.

   

8. At the LPM – Select action screen, choose “Allow and log” then click Next.

   

9. Lastly, at the LPM – Settings screen choose “User and System processes" under Scope and then click Finish.

   

Option2: Create Allow and Log rules for a Standard user to be able to install and run MyKi Password Manager. Note: If the user has already installed MyKi using their standard user account, then use this option.

1. Create a new Least Privilege Manager policy on either the Computer or User side, then add a new Executable policy for the downloaded MIKY installation EXE (i.e., MYKI-latest.exe).  Choose the “use combo rule (advanced) option, then select only Signature and File Info before clicking Next.
   
2. Under the “Combo condition” > “Select reference file” drop down, choose “From EXE file” then browse to and select the “MYKI-latest.exe” file. Answer “Yes” when prompted “Do you want to automatically fill the values from the selected file for file conditions?”, then click Next to continue.

   

3. At the LPM – Select action screen, choose “Allow and log” then click Next.

   

4. At the LPM – Settings screen choose “User and System processes" under Scope and then click Finish.

   

5. Next, add a new executable policy, again choose the “use combo rule (advanced)" option, however, this time select Path and Signature conditions before clicking Next.
    
6. Add the three paths below and answer “No” the first time when asked, “Do you want to automatically fill the values from the selected file for signature conditions?” And answer “Yes” the second time for the same question (when adding Update.exe path, etc.). Then click Next to continue.
   
   %LocalAppData%\MyKi\*\Squirrel.exe
   %LocalAppData%\MyKi\*\Update.exe
   %LocalAppData%\myki\Update.exe
    

   Your screen should look similar to below under “Path Condition” and “Signature Condition” respectively.
   
   
   

7. At the LPM – Select Action screen choose “Allow and log” then click Next.
   

8. At the LPM – Settings screen choose “User and System processes” then click Finish.

   

9. Next, add a new Executable policy, again choose the “use combo rule (advanced)" option, then select only Signature and File Info before clicking Next.

   

10. Under the “Combo condition” > “Select reference file” drop-down, choose “From EXE file” then browse to and select the following file “%LocalAppData%\myki\MYKI.exe”. Note: This file can be found at the specified location only after a successful MyKi installation.
     
11. Answer “Yes” when prompted “Do you want to automatically fill the values from the selected file for file conditions?”, then click Next to continue.

    

12. At the LPM – Select action screen, choose “Allow and log” then click Next.

    

13. Lastly, at the LPM – Settings screen choose “User and System processes" under Scope and then click Finish.

    

14. Next, add a new Executable policy and choose the “use combo rule (advanced)" option, then select only “Path” and “Command-line arguments” before clicking Next.
    

15. At the LPM – Configure Conditions screen enter “%SYSTEMROOT%\System32\cmd.exe” under “Path Condition”.
    

16. Then under “Command-line Arguments” select the “Strict equality" and “Ignore arguments case” boxes and also paste in the following text within the “Arguments” box before clicking Next to continue.

    /d /c "%localappdata%\myki\*\resources\native_messenger\index-win.exe" chrome-extension://*/*
    
    Your screen should look identical to below.
    

17. At the LPM – Select action screen, choose “Allow and log” then click Next.
    

18. Lastly, at the LPM – Settings screen choose “User and System processes" under Scope and then click Finish.