AdminRights

[TheGreenHorn]

Hi,

i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)

actually, i don't get what that means and what it does

my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas
does it mean the programm will break out the box and will have any effect on my computer?

please enlighten me
thanks in advance

[bo.elam]

Hi,

i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)

actually, i don't get what that means and what it does


but what if i grant admin rights for a programm in a sandbox?

does it mean the programm will break out the box and will have any effect on my computer?

please enlighten me
thanks in advance

To install a program in a sandbox you need to disable Drop Rights.

Programs are not going to break out of the sandbox when you disable Drop Rights.

Bo

[GreenHorn]

so if programmes with admin rights can't break out
why can i set drop rights? what is this function for?

[oloid]

my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas

You've disabled UAC yet you don't know what administrator privileges make possible? Hmm...

why can i set drop rights? what is this function for?

The setting in this page causes Sandboxie to strip administrative rights from programs running in this sandbox.

Specifically, the security credentials used to start the sandboxed program will not include membership in the Administrators and Power Users groups.

Note that this has little effect if you are already running under a non-Administrator user account.

On one level it's an extra bit of restriction on software running in a sandbox, not allowing installations or system file updates for example, even though such changes would take place in the sandbox you may not want software or users to have that ability.

Notice the settings box says it's similar to the DropMyRights utility, you can read about that HERE.

[bo.elam]

TheGreenHorn, I like this thread about Drop Rights, is a little old but is good read. I go along the thoughts exposed in posts #2, #3 and #4 in page 2. Put special attention to Tzuks post, also on page 2.

http://www.sandboxie.com/phpbb/viewtopi ... s&start=15

Bo

[GreenHorn]

well
so i just grant every programm admin rights in my sandbox
whatever a program writes on my hdd, it will be keeped in the sandbox
and i can delete the sandbox
so it's no problem for me