Run PoE as a limited user

[boterang]

This is a short guideline on how to prevent PoeHUD from getting scanned.
I just rewrite this guide [HOW TO] Protect against Warden for ours game, all credits to the author.
It is very important to understand, that this is not a 100% protection, but makes it harder...

A) The basic steps

- You will run PoE as a limited user.
- Note that the rest of your PC will still be running under your main username as normal. Only PoE will be running under the new limited username, in order to limit PoE's ability to read PoEHUD's running process and its files.
- This basic steps worked perfectly for me but may not work for everybody.

(1) Create a new (standard) Windows user with the password. Name it whatever you like.

Important: the new user account must NOT have admin rights; it must only have standard user rights.

>> PS: for the sake of this tutorial, we will name the new user BOT. Remember to replace this with your own username when doing this procedure.

(2) Navigate to the folder where your PoEHUD files are stored in.

(3) Right-click on this folder and under the Security tab, add this new user.
- Click Edit.
- Click Add.
- In the blinking space (Enter object name field), enter the name of your new user account.
- Click Ok, then Ok again.

(4) Choose your newly added username and deny all access to this folder.

(5) If not done already, create a shortcut for the "PathOfExile_x64.exe".

(6) Now, you have to edit the shortcut's target. This is the text field which tells you what path the shortcut actually executes.

The whole text should now look something like this, as an example (the path depends on where you installed the game):

C:\Windows\System32\runas.exe /user:YOURNAME /savecred "cmd /C cd \"C:/Program Files (x86)/Grinding Gear Games/Path of Exile/\" && PathOfExile_x64.exe"

(7) You should now be able to use this shortcut as before.

The only difference is that your PoE client will now run under a new user account that has no access to PoEHUD process or any of its files.

Important:

- When in the cmd prompt, the password is invisible, i.e. nothing will show when you type it. So, just type your password and press Enter.

- Remember that if you want use yours item filters you need to put them in the new user's Document folder. Navigate to "C:\Users" to find it.

If you don't care to have a shortcut you can open the folder which contains the required app and press and hold the Shift key and right-click on the file. In the context menu, select Run as different user, enter the credential.

If you have any problems or want more options, read this post (Thanks to Seminko and LOdddRi)


Thanks to thebbandit who wrote a useful batch script that will launch PoE as limited user.

[Evilwookie]

Has this already been tested and verified that it's undetected?

[boterang]

Hi, I just rewrote "the Thud method's" guide for people who don't understand what to do.
In my personal experience, in the last few months I have used PoEHud, modified ggpk, and my own ahk flask macro.
In the "days of warning" I also played with a fresh account, with the same "plugin".
Currently I haven't received any warning and any ban.

I haven't tested anything but there are a lot of post in the PoEHUD discussion and there are other people who seem to confirm that in the current state of things, it could be enough to avoid being tracked.

If some expert would like to reply about the goodness of "the method", you're welcome.

[EthEth]

Thank you for the instruction, it should be a huge help for not technical members of the community.

Tested it on my secondary and "anti-cheat" testing accounts.

TLDR - this method should work at this point IF they are not gathering data for the next banwave (so we can't be 100% if my tests are positive or negative).

Subject A
Account history: Old account dating pre 3.0, used for testing various programs (AHK, ExiledBot, POEHUD). Before testing it was not used after 3.0 patch.
Testing method: I was running old character in Standard with PoEHUD (only autoflask) since ban wave and warning wave for around 2 days and leveled new character in Incursion with same PoeHUD (only autoflask) for around 1 day.
Result: no warning, no ban so far.

Subject B
Account history: Old account dating pre 3.0, used for testing various programs (AHK, ExiledBot, POEHUD). I AM NOT SURE IF IT WAS USED AFTER 3.0
Testing method: I was running old character in Standard with PoEHUD (only autoflask) since ban wave and warning wave for around 1 day and leveled new character in Incursion with same PoeHUD (only autoflask) for around 1 day.
Result: no warning, no ban so far.

I can't provide better tests results - from statistical point of view this was poor testing group, yet it looks promising (once again: IF THEY ARE NOT GATHERING DATA FOR BANWAVE). I will not provide more information about tests for some protection from log-digging of my testing accounts performed by bot-hunters.

[dtmajors]

Used this and another method (Not sharing it just yet)

Been going non-stop since my warning and no ban on any of my accounts.

[Bashor7030]

Is there a way to use it with the steam version? Is seems like its not working with it :/

[NoodlesAreTheBest]

Kinda waiting for more feedback, but thanks for the re-write up

[MACROS4LIFE]

well, GGG is here, whatever you did they're goign to fix it and there is no more warnings only ban.

i wish poehud devs to pass anticheat or fix it, or we're done, i guess.

[boterang]

Is there a way to use it with the steam version? Is seems like its not working with it :/

I don't have Steam installed, so I can not try.
You probably have to start Steam as a limited user and as a result PoE will also be (check in task manager).

Default path is "C:\Program Files\Steam\Steam.exe".

[cerobug]

Is there a way to use it with the steam version? Is seems like its not working with it :/

Just put the "runas /user:BOT /savecred" part before your steam.exe and launch steam as the second user and that will cause PoE to automatically start as the other user. Should look something like this

runas /user:Secondaccount /savecred "C:\Program Files (x86)\Steam\Steam.exe"

I'm going to test this right now with both my Steam and PoE running as my second account and PoEHud folder denied access.

[Reuspa]

and my own ahk flask macro.

Care to share?

[boterang]

Care to share?

I don't think people are interested:
I don't have a keyboard with macros, so I created a script where, with a key, you use more flask together.
If you are still interested I send it to you.

[Jawlen]

I used macro recorder and made it drink all potions with one cbutton. I even emailed GGG about it as I have nerve damage in my left hand and it's very hard to press buttons with that hand let alot multiple keys. They said its illegal and easily detectable. I'm guessing from activating 5 potions in .1sec?

[levelmax]

I used macro recorder and made it drink all potions with one cbutton. I even emailed GGG about it as I have nerve damage in my left hand and it's very hard to press buttons with that hand let alot multiple keys. They said its illegal and easily detectable. I'm guessing from activating 5 potions in .1sec?

You can set random timings with autohotkey. Something like this:

F1::Flasks() ;

Flasks(){
   if WinActive("Path of Exile"){
	Send 3
	sleep, % _ran(20, 30)
	Send 2
	sleep, % _ran(33, 40)
	Send 5
	sleep, % _ran(50, 70)
	Send 4

   }
return
}

_ran(min, max)
 {
   random, ran, %min%, %max%
   return ran
 }

[orb666]

The autoquit plugin is not working while using this method. Am I doing something wrong?