Forced Folders & Network Locations [POTENTIAL SECURITY RISK]

[kawaiiwolf]

So while doing some work, a concern cropped up while I was editing some files on a network drive. How do you use Sandboxie to force programs running on an unmapped SMB network share ( \\computername\folder ) to run in a sandbox ? Sure anything I download will show up in a folder location that can be sandboxed, but explorer.exe runs outside a sandbox and starting up a file such as \\computername\folder\some.exe will launch in the context of the current explorer window and hence unsandboxed.

I realize you can open explorer.exe in a sandbox and then safely browse to a network location, but how do you FORCE this behavior ?

[Craig@Invincea]

Simply force File explorer...... Get path and add it as a forced program, but you may run into issues with other sandboxes run file explorer and try to access it.

This isn't a security risk related to SBIE, as you can set this up. A security risk is something that leaves the sandbox without your knowledge OR leaves the sandbox after you've designated it not too.

Simply not forcing something isn't a security risk, it's simply something a user would enable if they choose. For which is only available in the paid version.