A Force tweak?

SnDPhoenix · Post by **SnDPhoenix** » Mon Sep 24, 2007 5:57 pm

No no, that won't be a problem, I was just curious how it would work, thats all.

tzuk · Post by **tzuk** » Fri Oct 19, 2007 12:18 am

Check this out in version 3.0.25.

SnDPhoenix · Post by **SnDPhoenix** » Fri Oct 19, 2007 2:07 am

Awesome, this works perfectly, good job man!

MitchE323 · Post by **MitchE323** » Fri Nov 02, 2007 3:34 pm

This new ForceFolder setting is remarkable with the new version. Thanx Tzuk.

soccerfan · Post by **soccerfan** » Sat Nov 03, 2007 9:38 am

MitchE323 wrote:This new ForceFolder setting is remarkable with the new version. Thanx Tzuk.

Is this setting place in individual sandboxes only or can it be used in the GlobalSettings section too? Thanks.

SnDPhoenix · Post by **SnDPhoenix** » Sat Nov 03, 2007 1:28 pm

Yes, it is to be used individually for each sandbox, just like ForceProcess must be used invidually.

soccerfan · Post by **soccerfan** » Sat Nov 03, 2007 1:39 pm

SnDPhoenix wrote:Yes, it is to be used individually for each sandbox, just like ForceProcess must be used invidually.

OK. But ForceProcess also seems to work in GlobalSettings. I'm tyring to ensure that IE6 stays sandboxed in any of the sandboxes.

SnDPhoenix · Post by **SnDPhoenix** » Sat Nov 03, 2007 2:06 pm

You mean it does work Globally? I've never even tried that. But anyways, no, I don't think the "ForceFolder" parameter will work Globally. It is intended to be used individually for each sandbox. Although you could try using it as a GlobalSetting to see if it works. Or you could just goto the GUI, rightclick the sandbox, hit "Sandbox Settings", Goto "Force Folders" and set up IE to be forced. Also, btw, if your trying to force IE6, why not just use ForceProcess instead of ForceFolder?

tzuk · Post by **tzuk** » Sat Nov 03, 2007 3:34 pm

MitchE323 wrote:This new ForceFolder setting is remarkable with the new version. Thanx Tzuk.

My pleasure. In the latest version, I've even added some commentary to clarify how this can be useful to protect CD/DVD autorun.

soccerfan · Post by **soccerfan** » Sat Nov 03, 2007 4:26 pm

SnDPhoenix wrote:...you could try using it as a GlobalSetting to see if it works. ..Also, btw, if your trying to force IE6, why not just use ForceProcess instead of ForceFolder?

Right now, I'm using v3.01.21 and waiting for gurus like you and others (who have helped me in the past) to see what other goodies you unearth in the gui version before wading in

. As to using forceprocess, I have a copy of iexplore named ieadmin and the two run with different privileges from the same internet explorer folder, so I think forcefolder could be the ideal alternative

MitchE323 · Post by **MitchE323** » Sat Nov 03, 2007 8:04 pm

to see what other goodies you unearth

No longer any need to fiddle with the ini so everybody is on the same level now.

mitch

SnDPhoenix · Post by **SnDPhoenix** » Sat Nov 03, 2007 8:06 pm

MitchE323 wrote: No longer any need to fiddle with the ini so everybody is on the same level now.
mitch

Yeah, and its about time too. It was starting to get confusing with members not knowing where to put this, or how to enable that, or how to use this, etc..

MitchE323 · Post by **MitchE323** » Sat Nov 03, 2007 9:17 pm

Well Soccerfan, I can give a little one here on how is one way I am using 'Forcefolder' for a security measure. On a fresh install of XP there are a lot of 'internet enabled' programs installed by default. Things I never use like Outlook Express and Netmeeting and Messenger. Plus Moviemaker if you want to get technical. All of these programs have a history of security flaws.

I disable them in Services and uninstall some - but Windows Update and Windows File Protection are always at war with me on this. So I use ForceFolder to force the entire contents of all of these programs into a sandbox. Even though they shouldn't even be running at all.

In that box I only allow IE access out of the sandbox and nullify any potential unknowing running of those programs. In that way I do not have to uninstall them and fragment the registry. All done through the GUI by the way.

mitch

SnDPhoenix · Post by **SnDPhoenix** » Sat Nov 03, 2007 9:34 pm

Hey mitch, thats actually a pretty good tip. You should add it to that "Xtras" thread.

MitchE323 · Post by **MitchE323** » Sat Nov 03, 2007 9:39 pm

Ok, but I actually like this one from Soccerfan -

As to using forceprocess, I have a copy of iexplore named ieadmin and the two run with different privileges from the same internet explorer folder, so I think forcefolder could be the ideal alternative

I'll put mine in that thread if soccerfan does the same with his - lol.
mitch

Sandboxie Support

A Force tweak?

Who is online