Drop rights?

[safemist]

Hi. Is sandboxie safer with the drop rights box checked? If so, what are the disadvantages to using drop rights? Thanks.

[bo.elam]

Hi safemist, I think we are safer when we use the setting, specially when someone runs their computer as Administrator. I use the setting in all my dedicated sandboxes, except one, where the setting makes the sandboxed program take a little extra time to pop up open. I have noticed that most of the time when someone comes up with a POC that break the sandbox or finds a potential vulnerability in SBIE, using Drop Rights, stops the potential problem. So, I think its a good idea to use the setting when we can.

I really dont find any disadvantages is using the setting but its good to be aware that most of the time when we install a program in a sandbox, we have to disable the setting. Most programs wont install sandboxed in a sandbox with Drop Rights ticked.

Bo