AdminRights

If it's not about a problem in the program
Post Reply
TheGreenHorn

AdminRights

Post by TheGreenHorn » Fri Sep 07, 2012 1:12 am

Hi,

i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)

actually, i don't get what that means and what it does

my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas
does it mean the programm will break out the box and will have any effect on my computer?

please enlighten me
thanks in advance

bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: AdminRights

Post by bo.elam » Fri Sep 07, 2012 2:11 am

TheGreenHorn wrote:Hi,

i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)

actually, i don't get what that means and what it does


but what if i grant admin rights for a programm in a sandbox?

does it mean the programm will break out the box and will have any effect on my computer?

please enlighten me
thanks in advance
To install a program in a sandbox you need to disable Drop Rights.

Programs are not going to break out of the sandbox when you disable Drop Rights.

Bo

GreenHorn

Post by GreenHorn » Fri Sep 07, 2012 7:25 am

so if programmes with admin rights can't break out
why can i set drop rights? what is this function for?

oloid

Post by oloid » Fri Sep 07, 2012 2:15 pm

TheGreenHorn wrote:my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas
You've disabled UAC yet you don't know what administrator privileges make possible? Hmm...

GreenHorn wrote:why can i set drop rights? what is this function for?
tzuk wrote: Image

The setting in this page causes Sandboxie to strip administrative rights from programs running in this sandbox.

Specifically, the security credentials used to start the sandboxed program will not include membership in the Administrators and Power Users groups.

Note that this has little effect if you are already running under a non-Administrator user account.

On one level it's an extra bit of restriction on software running in a sandbox, not allowing installations or system file updates for example, even though such changes would take place in the sandbox you may not want software or users to have that ability.

Notice the settings box says it's similar to the DropMyRights utility, you can read about that HERE.

bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Post by bo.elam » Fri Sep 07, 2012 3:52 pm

TheGreenHorn, I like this thread about Drop Rights, is a little old but is good read. I go along the thoughts exposed in posts #2, #3 and #4 in page 2. Put special attention to Tzuks post, also on page 2.

http://www.sandboxie.com/phpbb/viewtopi ... s&start=15

Bo
Last edited by bo.elam on Fri Sep 07, 2012 4:58 pm, edited 2 times in total.

GreenHorn

Post by GreenHorn » Fri Sep 07, 2012 4:23 pm

well
so i just grant every programm admin rights in my sandbox
whatever a program writes on my hdd, it will be keeped in the sandbox
and i can delete the sandbox
so it's no problem for me

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest