Virtual account

[NRA]

Dear Team,
thank you for making, supporting and improving your Software (although one who seeks the Ideal will never have peace
In late '95 I liked to use so-called 'FanRAM' (a TSR) in our 486dx-computer class and made the teacher cry typing "format c:", deleting ALL dirs etc; and see her shinning when after Ctrl-Alt-Del (NOT before!) everything was OK. Cool.

But now I see a bit more serious purpose for such a tool:
why don't you make a Virtual Account? E.g. when loging-in it would work normaly, but after loging-off everything (if not saved explicitly) would return to a 'saved snapshot' or required confirmation of all 'changed' items or something automatically?

Yep, VMware/VPC etc do provide kind-of-'alike', but require a-n-o-t-h-e-r- /gues/ system to be installed and garbage-software used, and as for me I would like to have such a feature in the R-E-A-L working system. So? Is it quite possible?

Anyway, wish you good luch and keep good work' Cheers.

[OwenBurnett]

There is other software for drive snapshot/restoring as it is somethink completly different from what SB does there is no need in havong booth functionalitier in one application.
Try software like deepfreez or simmilar.

If you insist on using SB you could modigy the default shell of windows so that it starts sandboxed than everythink started later from the shall will be sandboxed to.

Owen

[street011]

reborn max / deep freeze / clean slate

[NRA]

Hi there

Ok, I appreciate your concern, but as usually a few 'buts':

a) "SHELL=" implementation in Admin rights account DOES make too much fuss and troubles accessing NTFS/GroupPolicy/shared items (at least now and/or at least for my p4 3.2/Dual1gb/WD200SATA-2 running XP PRO SP2)

b) using a hardware addon (?!) is too jolly for me and will eventually come to the question: why not just buy a new computer then? Or why not use DVD/Backups/Ghoust's etc?
Because it takes much time to restore and overwrites ALL (even needed) saved data spreading 'garbage' and dead files (especially if there're a couple of partitions)
Just a jest out of painful word 'experience'

c) I meant 'integrated and fully compatible' feature for a Sandboxed account without ADMIN rights leaving R-E-A-L system undisturbed (Services/Defrags/Logs/Antivirs etc)

Indeed, there's a point using 'SHELL' value, but I would rather prefer to let the user of such Account see ONLY things I want him to see (a clean boot/configuration etc) because, as you already may know, Admin can exit SB-shell and go on with the R-E-A-L system - just try

Well, that'll do for now. Cheers

[street011]

i'm using clean slate on a few config's of my own, it creates a layer over the existing system, when enabled it will capture all changes in it's layer instead of the 'real' system. so upon next reboot you're back with a clean slate

it's just a click of a button to disable the layer and make changes to the real system. then enable it back.
it's fully compatible with all kinds of software you want to allow changes or select unlayered folders etc.

tried deepfreeze but couldn't get it to work on windows server 2003 so i dropped it. same functionality though!

[NRA]

street011 thank you for remarks

frankly speaking I haven't tried this 'tabula rasa' (clean state), but as far as I understand THIS forum is about SandBoxie and Feature request

So, it was just a wish. Cheers

[street011]

i know
I would like to see the same functionality too, but i think it's pretty hard to do honestly, i hope tzuk sees something in this idea.

i also found a HUGE weakness in those cleanslate. so tzuk could try to be the better one

which we all know he is :p

[street011]

Well, it's been a while since this threat was active, today i've been active trying to use sandboxie to create a normal desktop, but... completely sandboxed...

Since the default windows Explorer doesnt work being sandboxed i tried it with a shell replacement. (ROS Explorer and LiteStep).

This worked perfectly, everything i do on my PC is sandboxed...

now the only thing preventing sandboxie from working like this without shell modification is the compatibility of the windows default Explorer.exe

Tzuk, i was hoping, maybe you can look into this one problem? (explorer shell start with sandbox (manualy ofcourse, not asking to make it a normal purpose of sb))

I know you are not intending sandboxie for this kind of usage and there are other alternatives for this, but i've realy had it with those, i'd love to make my own solution using sandboxie.

The people using that machine won't be the most experienced users, so i realy dont want to give them a modified shell interface.

[SnDPhoenix]

Well, it's been a while since this threat was active, today i've been active trying to use sandboxie to create a normal desktop, but... completely sandboxed...

Since the default windows Explorer doesnt work being sandboxed i tried it with a shell replacement. (ROS Explorer and LiteStep).

This worked perfectly, everything i do on my PC is sandboxed...

now the only thing preventing sandboxie from working like this without shell modification is the compatibility of the windows default Explorer.exe

Tzuk, i was hoping, maybe you can look into this one problem? (explorer shell start with sandbox (manualy ofcourse, not asking to make it a normal purpose of sb))

I know you are not intending sandboxie for this kind of usage and there are other alternatives for this, but i've realy had it with those, i'd love to make my own solution using sandboxie.

The people using that machine won't be the most experienced users, so i realy dont want to give them a modified shell interface.

Damn, thats a cool idea, I've always wanted to sandbox the whole desktop, but sandboxing explorer isn't a very good idea...
I wonder if this would work with Directory Opus or with Xplorer²??

[street011]

Snd, Explorer2 doesnt have Shell function, it's only a 'browser'

try the ones i used... they work...

Something very interresting i just found out...

When running LiteStep the explorer is active on the background... IN SHELL MODE! so i have a sandboxed original windows explorer shell...

So... obviously it CAN run... .... ... i'll mess around a bit more now... report back later

[SnDPhoenix]

Snd, Explorer2 doesnt have Shell function, it's only a 'browser'

try the ones i used... they work...

Something very interresting i just found out...

When running LiteStep the explorer is active on the background... IN SHELL MODE! so i have a sandboxed original windows explorer shell...

So... obviously it CAN run... .... ... i'll mess around a bit more now... report back later

Oh damn, you're right, I don't know what I was thinking, haha. ok, then I am going to try the ones you posted.
Also, I wonder if you can use AstonShell, hmm, theres an idea...

[street011]

I replaced the shell with "C:\program files\sandboxie\start.exe" explorer.exe

in fact it even loads... (i never waited that long before, just thought it would remain black screen) but it takes about 5 minutes to do so... first off i get 2 messages :

Code: Select all

Sandboxie Control

Could not install tray icon. Aborting.

then it loads fine after that... (indeed without tray icons )

now everything i do is sandboxed... (accept for Ctrl+Alt+Del -> taskmanager, but thats disabled by group policy)

I think tzuk has to reply to this one before i can try anything more...
tray icons would be nice aswell as a loadingtime of less then 5 minutes

[MitchE323]

I wonder if you can use AstonShell, hmm, theres an idea...

http://sandboxie.com/phpbb/viewtopic.php?p=11388#11388

[tzuk]

I think tzuk has to reply to this one before i can try anything more...
tray icons would be nice aswell as a loadingtime of less then 5 minutes

Looks like you're doing a nice job.

[street011]

so, tzuk... is there anything you can do about this?