Sandboxie Support

Greetings,

I have a Win 8 machine with 2 admin accounts (myself and my wife) and (currently) one limited account for the kids. I was wondering if it's possible to have different settings for Sandboxie for the different user accounts? What I'm looking to do is be much more restrictive permissions.

Currently, I noticed they too get the option when a file has been downloaded to recover it. I especially don't want them to be able to do that at all. However, for my account I don't mind that.

Does anyone else use Sandboxie to ensure other accounts on their computer are not used to download, save, and run things such as Cryptolocker?

Thanks in advance...

Hi!
Each user should be given their own Sandbox. This is important.
In each Sandbox Settings Add appropriate User to User Accounts.

Now you configure each Sandbox Settings how ever you wish them.

If you're licensed, you can have virtually unlimited Sandboxes-
active simultaneously without need to sign out of others first.

.

If you want security against changes or exploring your Sandbox.

First Delete Contents of existing Sandboxes.
Check with your other users before deletion. Equally important.

Sandboxie Control
Configure
Edit Configuration

Sandboxie.ini - Notepad

# under [GlobalSettings]
# add this next line
EditAdminOnly=y
# limited account will not be able to create or change Sandbox/settings.

# change the following line (which is your Set Container Folder setting)
FileRootPath=C:\Sandbox\%USER%\%SANDBOX%
# change it to exactly this next line
FileRootPath=%USERPROFILE%\Sandbox\%SANDBOX%

BUCKAROO wrote:Hi!
Each user should be given their own Sandbox. This is important.
In each Sandbox Settings Add appropriate User to Windows 8User Accounts.

Now you configure each Sandbox Settings how ever you wish them.

If you're licensed, you can have virtually unlimited Sandboxes-
active simultaneously without need to sign out of others first.

If you want security against changes or exploring your Sandbox.

First Delete Contents of existing Sandboxes.
Check with your other users before deletion. Equally important.

Sandboxie Control
Configure
Edit Configuration

Sandboxie.ini - Notepad

# under [GlobalSettings]
# add this next line
EditAdminOnly=y
# limited account will not be able to create or change Sandbox/settings.

# change the following line (which is your Set Container Folder setting)
FileRootPath=C:\Sandbox\%USER%\%SANDBOX%
# change it to exactly this next line
FileRootPath=%USERPROFILE%\Sandbox\%SANDBOX%

Thanks for the help i was also dealing with the same situation i will update my status here

Heads up, with my last recommended .ini change (to protect your Sandbox files from the prying eyes of users of limited accounts on your PC), these warning messages appear occasionally at random for all Sandboxes at the same time (through the outlet of standard Sandboxie Control Messages dialog and Event Viewer - Windows Logs - System - SbieDrv).

SBIE1406 Missing or invalid expansion for USERPROFILE: [C0000034]
SBIE1412 In text: [DefaultBox] %USERPROFILE%\Sandbox\%SANDBOX%

No side effects found. Safe to Hide and ignore.

Can I copy one of the games that the kids had under their user account (and up to now) within the same sandbox as all user accounts on this system to their new sandbox?

While I'm thinking of it I recently noticed that when I click on a file to download it's hanging . . . extremely long times. I'm talking I've seen it take up to hours before it even starts. Any change it may have anything to do with Sandboxie? A setting of some sort?

One last thought I had for the night: Can I set up Sandboxie for the kids account to NOT allow files to be copied outside of the sandbox?

The Conman wrote:Can I copy one of the games that the kids had under their user account (and up to now) within the same sandbox as all user accounts on this system to their new sandbox?

They did have their own Sandbox subfolder, didn't they? Well of course. Now you can move their subfolder and situate it at their new Sandbox container root path. Cut and Paste, but beforehand Delete the new, existing subfolder that may have been created recently - use that as an indication where it should end up with respect to our new FileRootPath configuration. I hope that's easy enough to understand... Most of the time there shouldn't be any problem moving actual [box_name] around and/or assigning it a new name. Access this Sandbox's start menu from Sandboxie Control to verify that the move was successful, try and launch a game.

.

It might be best to fresh install the game(s) in the fresh Sandbox.

Saved Games, you can hunt those up, and copy them into the respective location in the new Sandbox.

A lot of games you can just migrate their folder by hand, depends, others will complain or err.

.

Shortcuts on the real Desktop to those games in the new Sandbox location will be broken. Recreate any Sandbox shortcuts by jumping through hoops in the Sandboxie Control - Configure - Windows Shell Integration - Add Shortcut Icons. It is also possible to create shortcuts to various files from Sandboxie Control, Files and Folders view. And as I'm sure you're aware, it's even possible to copy and "Paste shortcut" to a file directly from within the Sandbox to outside of it, but this way, if for some reason Sandboxie services are not running (say, it is uninstalled) then opening that shortcut, well, it won't be sandboxed. Whereas the other methods of creating Sandbox shortcuts, opening them will fail as hoped without Sandboxie installed.

The Conman wrote:While I'm thinking of it I recently noticed that when I click on a file to download it's hanging . . . extremely long times. I'm talking I've seen it take up to hours before it even starts. Any change it may have anything to do with Sandboxie? A setting of some sort?

Try the latest beta version [4.17.x] of Sandboxie. We install wildly varying Sandboxie versions on top of existing installation, no harm has come of it, apart from experimental features.

Or, if you're running Windows 8.0 or below, install 3.x version, trusty 3.76 from the attic.
http://www.sandboxie.com/attic/SandboxieInstall-376.exe

The Conman wrote:One last thought I had for the night: Can I set up Sandboxie for the kids account to NOT allow files to be copied outside of the sandbox?

I don't know. I can't think of a way off the top of my head, besides a custom made Copy/Cut & Paste clipboard monitor - but that wouldn't cover file operations outside of Windows Explorer, e.g. copy by command line.

Sandboxie is not fit anymore (since version 4) to Sandbox the whole desktop Shell, namely Explorer, not talking the entire Session as was a once planned feature, but then it was never completely fit for this.