How to change the integrity level and the ANONYMOUS-LOGON?

If it's not about a problem in the program
Post Reply
Tester100
Posts: 26
Joined: Thu Oct 16, 2014 8:19 am

How to change the integrity level and the ANONYMOUS-LOGON?

Post by Tester100 » Sat Mar 26, 2016 6:17 am

Hello everyone! I'm hoping someone will be able to help me with my question here.

After Sandboxie 3.76, all sandboxed processes are started with an "Untrusted" integrity level and are run with the user "NT-AUTHORITY\ANONYMOUS-LOGON". Me and some other people are having problems with some applications like Bandicam, which isn't able to recognize games properly anymore. As far as I have seen, the "Untrusted" integrity level is the most strict process restriction in Windows, which doesn't allow as much freedom as the medium integrity level, which is standard for all processes started by a normal standard user.

My question: How do I start sandboxed processes with a medium integrity level and with my own user account again? I really would like to see if it has to do with the Bandicam problem here: http://forums.sandboxie.com/phpBB3/view ... 5&p=119570

This picture presents a nice overview over the existing integrity levels: http://www.thewindowsclub.com/wp-conten ... ontrol.jpg. As an attachement, I have added a screenshot, showing ProcessHacker where the sandboxed Bandicam process has the "Untrusted" integrity level and running as ANONYMOUS-LOGON.

Thank you very much in advance!
Attachments
2016-03-26_105307.jpg
Sandboxed Bandicam process. Due to the restrictions of the "Untrusted" integrity level, it was likely not able to launch it's second bdcam64.bin process
2016-03-26_105307.jpg (33.03 KiB) Viewed 534 times

Craig@Invincea
Sandboxie Support
Sandboxie Support
Posts: 3523
Joined: Thu Jun 18, 2015 3:00 pm
Location: DC Metro Area
Contact:

Re: How to change the integrity level and the ANONYMOUS-LOGO

Post by Craig@Invincea » Sat Mar 26, 2016 11:09 am

That change was required for security compatibility with Windows after v3.76.

Changes after 3.76 include Wow64 and many, many required security changes from Microsoft among other things. You cannot compare 3.76 to what SBIE is now, otherwise SBIE would not work.

Have you installed the program on your host and then run "as sandboxed?"

Not all programs can be installed directly into the SB.

I do not believe it can be changed.

We focus on support of office suites, web browsers and file attachments.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest