Launch AnyDesk Remote Desktop from KeePass

How to Launch AnyDesk Remote Desktop Access from KeePass

KeePass is a useful tool for administrators in their daily work in system maintenace and administrative tasks. AnyDesk is also often used, other remote maintenance software, such as VNC Viewer for remote desktop remote maintenance, also SSH terminal sessions to server and network devices are required.

This post shows how to launch AnyDesk Remote Desktop session to a remote computer directly from KeePass.

Add a new entry in KeePass

KeePass enables an external program to be executed out from an item with the transfer of parameters such as host name or address and the user credentials for authentication. To do this, add a new entry in KeePass with choose Add Entry to creates a new target.

Launch AnyDesk Remote Desktop Access from KeePass

In the General tab, the computer name is entered in the Title field. For User name the AnyDesk alias which is usually the computer name (hostname), alternatively the AnyDesk ID can be used. The AnyDesk password is entered in the Password field.

The KeePass URL to pass the parameters to AnyDesk:

cmd://"C:Program Files (x86)AnyDeskAnyDesk.exe" {USERNAME} --with-passwor

Launch AnyDesk Remote Desktop

After the entry is saved, the AnyDesk Remote Desktop session is started with a double-click in the URL column, or with the key combination Ctrl+V

Double click URL to connect AnyDesk Remote Desktop
AnyDesk Alias is the hostname

AnyDesk Alias is the hostname, or the ID that is displayed with 9 digits on the remote computer. The hostname (alias) is transferred to AnyDesk with the User name field as the USERNAME variable with the password as a parameter from KeePass.

What is AnyDesk Remote Desktop

AnyDesk is a remote desktop application distributed by AnyDesk Software GmbH. The proprietary software program provides platform independent remote access to personal computers and other devices running the host application. It offers remote control, file transfer, and VPN functionality. AnyDesk is often used in technical support and other remote access.

What is KeePass Password Safe

KeePass Password Safe is a free and open-source password manager primarily for Windows. It officially supports macOS and Linux operating systems through the use of Mono. Additionally, there are several unofficial ports for Windows Phone, Android, iOS, and BlackBerry devices, which normally work with the same copied or shared (remote) password database. KeePass stores usernames, passwords, and other fields, including free-form notes and file attachments, in an encrypted file.

Windows Trusted Installer with AdvancedRun

Run the SYSTEM and Trusted Installer service account with AdvancedRun

One would think that as an administrator authenticated to Windows, you have all the permissions to make changes in the registry, also under HKLM/SECURITY, to install software, or to change, overwrite or delete files and directories.

Windows service account SYSTEM and Trusted Installer are owner of system files and registry keys

Trusted Installer is a service account used by the Windows Modules Installer Service. The Trusted Installer service running under the Trusted Installer user has exclusive permissions to everything related to Windows updates and optional Windows components.

Windows uses the SYSTEM account at logon for internal tasks and processes, it manages the rights of the SYSTEM account itself. If you look in the user management, you will notice that this account does not appear there, and it can not be added to the group.

Administrators may be required to run programs in the context of the SYSTEM or Trusted Installer accounts if they own files and registry keys. Since the Windows on-board resources do not provide an adequate procedure for this task, free tools can take over this task.

Administrators could take ownership of files and folders owned by SYSTEM or Trusted Installer. However, this would potentially affect system services and processes if the owner is not undone.

It is better to run programs such as regedit.exe or Explorer under these accounts to modify files or registry entries that belong to these particular service accounts.

Run Program with AdvancedRun as SYSTEM und Trusted Installer

Nirsoft’s AdvancedRun utility makes it easy to run programs with many options as special users in Windows.

AdvancedRun has many useful features

AdvancedRun has many useful features beyond running as a SYSTEM or Trusted Installer. It is also allowed to run as NetworkService or LocalService.

AdvancedRun Features:

  • Run program with user of another running process
  • Run a program as another logged-in user without knowing and having to enter their password.
  • Run RegEdit as a SYSTEM user. In this mode you can access the key HKEY_LOCAL_MACHINE\SECURITY.
  • Run high-priority programs
  • Use other PATH environment variables without changing the actual PATH

AdvancedRun can be downloaded here.