Are my assumptions correct with Sandboxie? [SOLVED]

[theBrownChiLD]

I would appreciate it if someone can if the following assumptions about programs inside sandboxie are correct:
1. You are able to completely isolate read/write access away from real user space ie. don't allow program to READ or write files from user space
2. You can not only run Programs sandbox, but also install programs into sandboxie for complete protection - so that any sneaky installer activities,side loads, trojans, do not get installed into real user space
3. You can limit hardware resources in sandboxed program (ie, max RAM, CPU allocation, disk space)
4. Sessions, files, and other changes are saved and can be resumed in Sandbox's virtual environment for the sandboxed program

ps
I use Virtual Machines (VMWare) to run software i dont trust but really need to use. These programs don't require complicated OS and hardware access (like IP camera viewers, and other CLient side tools) and since it's getting quite resource hungry and hectic to keep VM running with full W10 OS just to use these programs, I figured I could just use sandboxie instead as long as i can COMPLETELY isolate these programs as if they were running in VIRTUAL MACHINES.

[bo.elam]

Hi, BrownChilD.

1. You can control what sandboxed programs can write outside the sandbox via Sandbox settings. If you dont want nothing to get out, dont allow nothing. Regarding READ, sandboxed programs have to read outside the sandbox in order for them to work properly. If there are files they have to access to work in the sandboxed environment and they cant read them, they wont work. But in Sandbox settings, you ll find settings that you can use to block sandboxed programs from accessing/reading personal and sensitive files. You can use this settings to block whatever you want but remember, if the sandboxed programs needs to access a file or older and you block it, it wont work.

2. You can install a lot of type of programs in the sandbox but some wont work. So, you have to try them. If a program is very complicated, installs drivers for example, then, installing the program in the sandbox wont work.

3. You cant limit. But programs in the sandbox use very little resources and they are used only when running. So, reources dont mean anything in Sandboxie.

4. When you install programs in the sandbox, you can save the sandbox for as long as you want. Changes, etc, remain in the sandbox until you delete it.

Sandboxie is a fantastic program, give it a try.

Bo

[theBrownChiLD]

Bo!

You are awesome, thanks for taking the time to enumerate these things for me. Saves me a loot of time, so I do appreciate it.

Definitely now moving on to trying Sandboxie and figure the rest out myself.

Thank you thank you!
BC

[bo.elam]

You are welcome, BC. Here are a couple of ideas for you to keep in mind when installing programs in a sandbox. One, for better isolation, separate programs from each other by creating dedicated sandboxes for different programs. Two, when you install programs in a sandbox that don't require internet access to work properly, via Sandbox settings you can block all programs that run in this sandbox from having access to the internet. This alone can put your mind at ease since programs that run in sandboxes set this way wont be able to connect out, cant phone home.

Bo

[theBrownChiLD]

ohh damn, that's nice. didn't expect sanboxie to have that firewall like feature. definitely going to abuse that feature as well hehe thanks a bunch!