Is with Sandboxie possible to sandbox entire computer system

[Lumberjack]

Is with Sandboxie possible to sandbox entire computer system, is it possible to force entire computer system to start/run sandboxed?

[Guest10]

No. If you try to set it that way you should get a warning, and you will likely have to use Safe Mode to undo your change, so that you can use it again.

[b1399738]

>> sandbox entire computer system

there is a freeware program called "vmware player" (commercial edition cost 200$. it is worth it)

or "virtualbox" from oracle entirely free

[Lumberjack]

Ok that settles the debate, thanks to both.

[Username]

Sometimes I occasionally see that Internet-cafes still use old Shadow user, which can sandbox entire account (a virtual account) and revert or apply all the changes. It's different from SandBoxIE for they have different purpose and different mechanisms. Also SU is rather resources-hungry, because it has to make incremental change archiving. Thus, after an hour or two even a moderately powerful i5 with 4GB RAM DD3 and 1.5TB HDD SATA 3 operates visibly slower and performance keeps degrading.

Remarkably I did see SU (trial) in the PC shop machines, but somehow I don't see SBIE (even free versions), which makes me think that although Ronen is really sensible programmer, yet he is not very good in marketing...

Something like that.

[AmbitEnerg]

Sorry ssdada, there's no useful information that you post, you are just spamming to put the links you on it. Anyway you are free for I am not the moderator of this thread, if I do, your post is already junk....


And for Lumberjack, yes, it is possible but but because it is not designed to those there will be some bug if you try. There's a complete package for that, named vmware it is a freeware program.

[Username]

AmbitEnerg, although I agree about spammers, I must admit that your answer is somewhat confusing:

1) SBIE cannot sandbox the entire system, because (a) it wasn't intended and (b) to work reliably it relies unto host (non-sandboxed) processes--check the info; however, using an alternate SHELL (not EXPLORER.EXE) one might achieve more or less desired results;

2) there're very many different virtualizers which work at different level (e.g. a separate app, a user account, a PC, a virual PC, a virtual network/cluster of real/virtual PC's), but VMWARE is neither virtual-account oriented, not free; perhaps it's a VMWare PLAYER which is more limited even than free Virtual PC;

And the problem with secure virtualization is not the 'separation', but working as Admin )

[Buster]

VirtualBox is a free vm solution.

[lylejk]

There's actually 2 routes that you can go for your request. One is using virtual machines as others have already mentioned. The other is to use a virtualization program such as Deep Freeze which many schools and libraries use. Sandboxie is really good at virtualizing programs/browsers but to virtualize an entire session is out of the scope for SB.

[Buster]

If you decide to use Deep Freeze, keep in mind that it is only secure if you run it from a user account. If you run DF from an admin account, it can be bypassed.

[Lumberjack]

If you decide to use Deep Freeze, keep in mind that it is only secure if you run it from a user account. If you run DF from an admin account, it can be bypassed.

Yes, but I saw ssj100's setup of sandboxing explorer.exe (which is basically entire computer) so obviously it can be done.