Hello everyone! I'm hoping someone will be able to help me with my question here.
After Sandboxie 3.76, all sandboxed processes are started with an "Untrusted" integrity level and are run with the user "NT-AUTHORITY\ANONYMOUS-LOGON". Me and some other people are having problems with some applications like Bandicam, which isn't able to recognize games properly anymore. As far as I have seen, the "Untrusted" integrity level is the most strict process restriction in Windows, which doesn't allow as much freedom as the medium integrity level, which is standard for all processes started by a normal standard user.
My question: How do I start sandboxed processes with a medium integrity level and with my own user account again? I really would like to see if it has to do with the Bandicam problem here: http://forums.sandboxie.com/phpBB3/view ... 5&p=119570
This picture presents a nice overview over the existing integrity levels: http://www.thewindowsclub.com/wp-conten ... ontrol.jpg. As an attachement, I have added a screenshot, showing ProcessHacker where the sandboxed Bandicam process has the "Untrusted" integrity level and running as ANONYMOUS-LOGON.
Thank you very much in advance!
How to change the integrity level and the ANONYMOUS-LOGON?
How to change the integrity level and the ANONYMOUS-LOGON?
- Attachments
-
- Sandboxed Bandicam process. Due to the restrictions of the "Untrusted" integrity level, it was likely not able to launch it's second bdcam64.bin process
- 2016-03-26_105307.jpg (33.03 KiB) Viewed 534 times
-
- Sandboxie Support
- Posts: 3523
- Joined: Thu Jun 18, 2015 3:00 pm
- Location: DC Metro Area
- Contact:
Re: How to change the integrity level and the ANONYMOUS-LOGO
That change was required for security compatibility with Windows after v3.76.
Changes after 3.76 include Wow64 and many, many required security changes from Microsoft among other things. You cannot compare 3.76 to what SBIE is now, otherwise SBIE would not work.
Have you installed the program on your host and then run "as sandboxed?"
Not all programs can be installed directly into the SB.
I do not believe it can be changed.
We focus on support of office suites, web browsers and file attachments.
Changes after 3.76 include Wow64 and many, many required security changes from Microsoft among other things. You cannot compare 3.76 to what SBIE is now, otherwise SBIE would not work.
Have you installed the program on your host and then run "as sandboxed?"
Not all programs can be installed directly into the SB.
I do not believe it can be changed.
We focus on support of office suites, web browsers and file attachments.
Who is online
Users browsing this forum: No registered users and 1 guest