Trust No Program

Force Folder


ForceFolder is a sandbox setting in Sandboxie.ini which allows to force folder contents to run inside a specific sandbox. If any files or programs in these folders* (or in a sub-folder of one of these folders) are started outside any sandbox, they will be automatically sandboxed into a particular sandbox. For example:

   .
   .
   .
   [DefaultBox]
   ForceFolder=C:\Download
   ForceFolder=E:\
			

The first example specifies that files/programs started from the C:\Download folder (or any folders below contained in those folders) will be forced to run sandboxed in the sandbox DefaultBox.

The second example specifies that any files/programs started from drive E will be forced to run sandboxed in the sandbox DefaultBox. For CDROM and DVD drives, this includes forcing the AutoRun programs that are automatically started by Windows.

* Please keep in mind that shortcuts located inside a ForceFolder, that are pointing to a path that is not a ForceFolder, will not start a Sandboxed application. For example: if you place a shortcut inside C:\ForcedFolder and it points to C:\SomeOtherPathThatIsNotForced, then the shortcut will trigger a non-sandboxed application.

Another consideration is that metro apps are not supported. If your default application for opening a specific file type is a Windows Metro app (such as Windows 10 photo viewer), the application will launch outside the Sandbox. For more information regarding Windows Metro apps please see https://www.sandboxie.com/KnownConflicts#Windows 10

See also: ForceProcess. If both a ForceFolder and a ForceProcess are applicable to a program that is starting, the ForceFolder setting takes precedence.

Related Sandboxie Control setting: Sandbox Settings > Program Start > Forced Folders

Jump to
Sandboxie Ini
setting:


Global Settings:

ByteOrderMark

AlertProcess

ForceDisableSeconds
ForceDisableAdminOnly

EditAdminOnly
EditPassword
MonitorAdminOnly

ActivationPrompt


Enabled

FileRootPath
IpcRootPath
KeyRootPath

AutoDelete
NeverDelete
DeleteCommand

AutoRecover
AutoRecoverIgnore
RecoverFolder

AutoExec

BoxNameTitle
BorderColor
Description

CopyLimitKb
CopyLimitSilent

ForceFolder
ForceProcess
LingerProcess
LeaderProcess

NotifyInternetAccessDenied
NotifyStartRunAccessDenied

BlockDrivers
BlockFakeInput
BlockPassword
BlockSysParam
BlockWinHooks

BlockPort

DropAdminRights

OpenFilePath
OpenPipePath
ReadFilePath
WriteFilePath
ClosedFilePath

OpenKeyPath
ReadKeyPath
WriteKeyPath
ClosedKeyPath

OpenIpcPath
ClosedIpcPath

OpenWinClass
OpenClsid
OpenProtectedStorage
OpenCredentials

InjectDll
InjectDll64

ProcessLimit1
ProcessLimit2


See also:

Expandable VariablesShell FoldersProgram Name PrefixDeprecated Settings

Top

Sandboxie is Copyright © 2004-2019 by Sandboxie Holdings, LLC.  All rights reserved.
Sandboxie.com | Contact Author