 |
Trust No Program |
|
Trust No Program |
Sandboxie supports automated installation that may be useful to push Sandboxie to a large number of workstations in a corporate setting.
The four steps of the automated installation are:
These steps are described in the sections below. Once Sandboxie is installed, the task of upgrading workstations to a newer version of Sandboxie can also be automated. See the section below:
Prior to running the installation on a workstation, place a copy of Sandboxie Ini configuration file in the Windows directory. This pre-prepared configuration file should be created on a workstation at some point during your evaluation of Sandboxie.
|
Important: The Sandboxie.ini file should be saved in Unicode encoding. If you are manually creating the file from scratch in Notepad, then make sure to use "Save As" so you can specify Unicode in the Encoding field. |
Some points to consider when preparing the configuration file:
Please see the Sample Sandboxie.ini File below for more ideas.
Sample command to copy Sandboxie.ini:
copy \\FileServer\SandboxieSetup\Sandboxie.ini C:\Windows
To run the Sandboxie installation program silently, use this command:
"\\FileServer\SandboxieSetup\SandboxieInstall.exe" /lang=xxxx /install /S /D=C:\Program Files\Sandboxie
The /lang=xxxx parameter is optional. It specifies which language translation to install:
/lang=1033 for English. This is the default setting.
/lang=1052 for Albanian
/lang=2052 for Chinese (Simplified)
/lang=1028 for Chinese (Traditional)
/lang=1029 for Czech
/lang=1030 for Danish
/lang=1043 for Dutch
/lang=1061 for Estonian
/lang=1035 for Finnish
/lang=1036 for French
/lang=1031 for German
/lang=1040 for Italian
/lang=1041 for Japanese
/lang=1042 for Korean
/lang=1045 for Polish
/lang=1046 for Portuguese (Brasil)
/lang=1049 for Russian
/lang=1034 for Spanish
/lang=1055 for Turkish
(The following applies to Sandboxie version 3.48 and later.)
Apply your Product Key into the installed copy of Sandboxie:
"C:\Program Files\Sandboxie\License.exe" silent activate PRODUCTKEY
This command validate the Product Key on the Sandboxie web site and activates the license. If you wish to make sure the activation was successful, use this command instead:
start "" /wait "C:\Program Files\Sandboxie\License.exe" silent activate PRODUCTKEY
This alternate form will make sure the built-in ERRORLEVEL variable receives the value zero (0) on successful activation or the value one (1) on failure.
Special considerations for customers who place a large commercial order:
If you have a Product Key for an order of at least 100 licenses, the activation key will not include an expiration date. You may additionally request an activation key that is not tied to a particular computer, and which can be activated without connecting to the Sandboxie web site.
To acquire your special activation key, please follow the instructions in the Offline Activation page. Simply enter a system code 0000000000000000 (16 zeroes) to request the special activation key. Use the following command to apply the activation key into Sandboxie:
"C:\Program Files\Sandboxie\License.exe" silent activate ACTIVATIONKEY
This alternate form does not connect to the Sandboxie web site, and should not fail, assuming that the activation key was copied correctly. Where applicable, this command can be used instead of the silent activate PRODUCTKEY form, shown earlier.
Note: The activation key is always tied to a particular version of Sandboxie.
See Also: The ActivationPrompt setting.
The Sandboxie Control program is responsible for automatically deleting the sandbox, among other tasks, so you are advised to run it in any logon session where Sandboxie may be used.
An installation of Sandboxie does not configure Sandboxie Control to auto-start during logon. However, a typical installation launches Sandboxie Control when it finishes, and in turn Sandboxie Control configures itself to auto-start during logon, by adding itself to the "Run" key for the current user.
However, the silent installation does not start Sandboxie Control when it finishes.
The recommended approach to this in a corporate installation is as follows.
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run
/v SbieCtrl /t REG_SZ /d "C:\Program Files\Sandboxie\SbieCtrl.exe" /f
(Note: This is a single-line command which was broken into two lines to enhance clarity.)
[UserSettings_Default]
SbieCtrl_EnableLogonStart=N
Please see the sample below for a full example.
[GlobalSettings]
ForceDisableAdminOnly=yes
EditAdminOnly=yes
MonitorAdminOnly=yes
FileRootPath=C:\TEMP\Sandbox\%USER%\%SANDBOX%
ActivationPrompt=n
[DefaultBox]
Enabled=y
ConfigLevel=6
AutoDelete=y
AutoRecover=n
ForceProcess=iexplore.exe
OpenFilePath=%Favorites%
OpenFilePath=%Desktop%\Download
LeaderProcess=iexplore.exe
BorderColor=#00FFFF
[UserSettings_Default]
SbieCtrl_ShowWelcome=N
SbieCtrl_HideWindowNotify=N
SbieCtrl_ReloadConfNotify=N
SbieCtrl_AutoApplySettings=Y
SbieCtrl_SettingChangeNotify=N
SbieCtrl_TerminateWarn=N
SbieCtrl_ExplorerWarn=N
SbieCtrl_EditConfNotify=N
SbieCtrl_ProcSettingsNotify=N
SbieCtrl_ExplorerNotify=N
SbieCtrl_ShortcutNotify=N
SbieCtrl_TerminateNotify=N
SbieCtrl_EnableLogonStart=N
SbieCtrl_EnableAutoStart=Y
SbieCtrl_AddDesktopIcon=N
SbieCtrl_AddQuickLaunchIcon=N
SbieCtrl_AddContextMenu=N
SbieCtrl_AddSendToMenu=N
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=N
SbieCtrl_AutoRunSoftCompat=N
|
rem
rem If Sandboxie is already installed on this workstation, do nothing
rem
if exist C:\Windows\Sandboxie.ini exit /b
rem
rem Set Configuration
rem
copy "\\FileServer\SandboxieSetup\Sandboxie.ini" C:\Windows
rem
rem Install Sandboxie
rem
"\\FileServer\SandboxieSetup\SandboxieInstall.exe" /install /S /D=C:\Program Files\Sandboxie
rem
rem Register Sandboxie
rem
"C:\Program Files\Sandboxie\License.exe" activate XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
rem
rem Start Sandboxie Control
rem
set ZZKEY=HKLM\Software\Microsoft\Windows\CurrentVersion\Run
set ZZEXE="C:\Program Files\Sandboxie\SbieCtrl.exe"
c:\windows\system32\reg add %ZZKEY% /v SbieCtrl /t REG_SZ /d %ZZEXE% /f
%ZZEXE%
|
In this scenario, Sandboxie already installed, registered and configured in the corporate workstations, as described above. A newer version of Sandboxie can be pushed to the workstations by simply running the Sandboxie installation program in upgrade mode. Use this command:
"\\FileServer\SandboxieSetup\SandboxieInstall.exe" /upgrade /S
Note that an upgrade installation does not require the /lang or /D switches that were necessary for initial installation.
Two notes regarding Sandboxie Control:
Sandboxie is Copyright © 2004-2019 by Sandboxie Holdings, LLC. All rights reserved.
Sandboxie.com | Contact Author