Page 1 of 1

single-machine, multi-user with Sandboxie

Posted: Tue Apr 14, 2015 10:13 pm
by Nerdtron
I'm using a registered copy of Sandboxie on Win8.1 x64. I setup a new machine with a single administrative user account and installed Sandboxie. I created a sandbox and installed some stuff on that sandbox.

I then created a second administrative user account. While logged onto this second account, I manually found the sandboxie control exe and ran it.

On this second account, I see the same sandbox which was previously created on the initial account. But when I run sandboxed explorer inside it I don't see any of the files installed on the same sandbox from the first account.

Can someone point me to an explanation of how Sandboxie works on a machine with multiple users? Just want to better understand this aspect.

Thanks!

Re: single-machine, multi-user with Sandboxie

Posted: Tue Apr 21, 2015 8:34 pm
by JoeHood

Re: single-machine, multi-user with Sandboxie

Posted: Sat Apr 25, 2015 11:29 am
by btm
If you are using some type of persistent sandbox 'eg not auto-delete' or 'installed within' you may want to consider changing the sandbox path. By default it is set up to isolate user paths. 'C:\Sandbox\%user%\%sandbox%'

Where %user% = the username that launched the program and %sandbox% is the sandbox name, ex 'DefaultBox'
So When user Admin1 is running it's opening the sandbox at 'C:\Sandbox\Admin1\DefaultBox'
and when Admin2 is running it's opening the sandbox at 'C:\Sandbox\Admin2\DefaultBox'

This means the second admin won't see the first one as its an entirely different folder path. You could use runas (unless you're on XP- that ones currently bugged w sandboxie 4) or simply alter the location of your sandbox.

To do this you'll have to set a new location and move the current sandbox unless you're willing to recreate it. Open Sandboxie Control and select the box that you want to be shared between the two accounts. Then Select 'Sandbox' from the menu followed by 'Set Container Folder'. If the current path for the box is 'C:\Sandbox\%user%\%sandbox%' you could for instance set it to 'C:\Sandbox\Shared\%sandbox%' instead. Then using explorer or some other file manager, open C:\Sandbox. Inside you should see more folders with your usernames if they haven't been set to delete themselves. As you used your Admin1 account to create the sandbox you'll want to go inside that one and find the folder that reflects the sandbox name. Copy it and move back to the C:\Sandbox folder. Create a new folder and rename it to 'Shared' if that's what you changed the path to. Then open it and paste the sandbox folder inside. Test it on both and if the set container path and one you moved it to match, both should now be able to access it. If it doesn't work, re-check the paths.