SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRights

[Iggiz]

Often installers ask for admin rights but they actually don't need them to install.
Mostly, this happens because programs try to install themselves into the program files folder by default.

Here's the compiled version of SboxieUtil and its features:
SboxieUtil Features

1. Install programs without Administrator Rights (no UAC prompts, no SBIE2217 errors).
-Tested with Inno Setup and NSIS installers, but it should work with other installers/programs too.

2. Clipboard access control for sandboxed programs (ReadWrite, Read, Write, Block, BlockAll).

New Feature:

3. Start/Run restrictions for programs installed inside of a sandbox.

Note: It will not show any error messages when a process start was blocked but you can view the debug output with Dbgview from microsoft. (Apply a filter named SboxieUtil)

Each feature supports exceptions "ProcessExceptions=" "SandboxExceptions=", configurable via SboxieUtil.ini
More features will be added later, please check the readme file for the full feature list and installation instructions.
https://drive.google.com/file/d/0B5by5H ... 9GbEk/view

Download (Source code included):
https://drive.google.com/drive/folders/ ... EJXaHVvV1U

[Barb@Invincea]

Hello Iggiz,

I am moving this thread to the Contributed Utilities & Templates section.

Regards,
Barb.-

[Iggiz]

Sorry Barb, I will pay more attention next time and post it in the right section.


Some updates regarding inno setup installers, I wrote a dll that can be injected via sandboxie to be able to run inno setup installers without admin rights too.
Not sure if I'm allowed to upload it here as attachment, but if there is interest then I'll find a place to upload it.

If someone likes to build a dll on their own, you'll need to hook ShellExecute/ShellExecuteEx and look for the "runas" verb, replace it with "open".
Additionally the installer will also call "CheckTokenMembership", you'll have to hook that too and return true.

[Iggiz]

I just uploaded a beta version with a newly added feature, follow the link in the first post and open the beta folder to find it.

New Feature:

Start/Run restrictions for programs installed inside of a sandbox.



I know you're actually not supposed to install programs inside of a sandbox, but it can be useful in some cases so I ended up adding this feature.
If you install a program normally (outside of a sandbox) then please stick to the Start/Run restrictions offered by sandboxie itself.


Note: It will not show any error messages when a process start was blocked but you can view the debug output with Dbgview from microsoft. (Apply a filter named SboxieUtil)

[Iggiz]

Update:

I simplified everything and replaced the registry tweaks with a new RunAsInvoker= key inside SboxieUtil.ini



@Barb (Or any other moderator):

Could you modify the first post and remove all the lines starting from "Often installers ask ..." up to "Here's the compiled version..." ?
Thanks

[Barb@Invincea]

Iggiz,

Per our PM conversation, this is done.

Please feel free to PM me directly if you need any other changes made to the original topic.

Regards,
Barb.-