It may be a stupid question, but...

[cocoon]

I have a question about Forced Programs.

What happens if I have the same forced program registered in more than one sandbox and, say, I start it not in any one of those sandboxes, but using instead (unsandboxed) Windows Explorer or from the Start Menu? Assuming that Sandboxie would trap the program invocation, which sandbox would prevail, for example concerning Internet access restrictions for the program concerned?

[Barb@Invincea]

Hello cocoon,

The program will run in the first Sandbox that it is forced to start in.
You can test it if you have the paid version. Just set a program to forced in multiple Sandboxes and you'll see the behavior.

Please find more info here:
https://www.sandboxie.com/ForceProcess

Regards,
Barb.-

[cocoon]

Thanks Barb.
Forgive me if I didn't fully understand the explanation.
Taking as an example the information in the link that you mentioned:

[DefaultBox]
ForceProcess=iexplore.exe
ForceProcess=firefox.exe
[MailBox]
ForceProcess=outlook.exe
ForceProcess=firefox.exe

What would happen in the above situation? If Firefox were to be started unsandboxed, would it run as a forced process in the DefaultBox or in the MailBox sandbox?

[bo.elam]

[DefaultBox]
ForceProcess=iexplore.exe
ForceProcess=firefox.exe
[MailBox]
ForceProcess=outlook.exe
ForceProcess=firefox.exe

What would happen in the above situation? If Firefox were to be started unsandboxed, would it run as a forced process in the DefaultBox or in the MailBox sandbox?

Hi cocoon, the proper thing to do would be to leave Firefox as a Forced program in your DefaultBox, and take it off from the Mailbox.

By doing so, if you click a link in an email and Firefox is your default browser, Firefox will run sandboxed in your Mailbox (as long as outlook.exe is forced, as you have it now).

If you run Firefox in any other way, it would be forced to run sandboxed in your DefaultBox.

Bo

[cocoon]

Thanks for the comment. So if I understand correctly according to that example, if program X is invoked by a sandboxed program Y, then X will run sandboxed in Y's sandbox. Else, if X is a Forced Program in a sandbox, it will run sandboxed if invoked either specifically from its sandbox or by any other means.

[bo.elam]

Thanks for the comment. So if I understand correctly according to that example, if program X is invoked by a sandboxed program Y, then X will run sandboxed in Y's sandbox. Else, if X is a Forced Program in a sandbox, it will run sandboxed if invoked either specifically from its sandbox or by any other means.

Exactly.

Bo

[cocoon]

Thank you for the confirmation. Looking back, I see that this is compatible with the practice that you use according to what you wrote a while back in answer to some other questions by me.

[bo.elam]

Thank you for the confirmation. Looking back, I see that this is compatible with the practice that you use according to what you wrote a while back in answer to some other questions by me.

You are welcome, Cocoon. I am glad to help when I can.

Bo