Library Mode

[af3]

I would like to see a one-tick option that would sandbox everything running in user mode. That is, everything beyond the Windows logon screen including explorer.exe & friends.

I know, I know. You're going to suggest using SteadyState by Microsoft. The problem is, SteadyState seems somewhat more invasive in that it cordons off a section of the hard disk while Sandboxie does not.

As I understand it, when one enables the hard drive lock feature in SteadyState, it creates a copy of the existing data on your hard drive to a swap file. Upon reboot, you are essentially reimaging the drive which from what I have heard, takes a bit of time.

Of course the default behavior for Library Mode should be erasing upon reboot, but an option to keep the data until manually removed would be useful as well.

Sure all of this can be configured manually in Sandboxie, but a one-stop checkbox would hit the spot and make life much easier. I have contemplated building an unintended preconfigured installer which achieves this behavior with minimal user configuration, but it would be much better if the application supported this behavior as a sort of preset. Or rather, sort of like an instant user/system isolation, rather than the classic on-demand per-application behavior.

Of course, one could tell Sandboxie to sandbox everything executing in the system drive, but I would think that there is more to it when it comes to programs such as explorer.exe. Perhaps modification to the registry?

Code: Select all

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Shell"="$$$Sandboxie Init String$$$"

[MitchE323]

Sounds like Returnil (another great program btw).

[af3]

I must try it. Does it reserve disk space like SteadyState, or does it behave like Sandboxie, only writing to an isolated location when changes are made? If it's like SteadyState it's of no use to me.

[MitchE323]

It writes everything in Ram, but uses very little of your actual Ram. ALL changes are gone on reboot. Many use it in addition to Sandboxie. With Sandboxie you can control things like Internet Access and such, which Returnil is not concerned with. They give you an optional "Virtual Drive" which is just to store stuff that you want to keep, if you don't have another drive you can use. Try the freeware version, in addition to the paid version of Sandboxie and you are just about done security wise. Also nothing to 'secure delete'

[Shield]

I found with Returnil there's no way to automatically have some sort of exclusion/commit list without having to go through the processs of manually update the files/folders. Are you using Returnil? How are you keeping your software up-to-date?

[MitchE323]

Well you can simply jump off Returnil for that, but I think I saw something somewhere that either said they had something coming soon - or it already existed in the paid version..... but we would have to check that.

[Shield]

There's no way to do that in the Premium Edition, at least not a way that I could figure it out

Reason why I need something hassle-free is for those with very little computer knowledge. On this particular computer apps are rarely being installed so my only concern is keeping the security apps up-to-date.

I've found that ShadowUser causes conflict with Sandboxie. Running ShadowDefender right now, it includes an Exclusion List and a Commit Now list. But I'm still open and on the look out for others.

[MitchE323]

Yeah, ShadowDefender is another good one and I probably should have mentioned it earlier.

[af3]

Interesting, I shall look for ShadowDefender as well. Thanks for the suggestions!