Hi,
i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)
actually, i don't get what that means and what it does
my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas
does it mean the programm will break out the box and will have any effect on my computer?
please enlighten me
thanks in advance
AdminRights
Re: AdminRights
To install a program in a sandbox you need to disable Drop Rights.TheGreenHorn wrote:Hi,
i'm using sandboxie and i have a sandbox with restricted admin rights
now when i'm trying to install any programm, it requires admin rights (SBIE2217, SBIE2219, SBIE2220)
actually, i don't get what that means and what it does
but what if i grant admin rights for a programm in a sandbox?
does it mean the programm will break out the box and will have any effect on my computer?
please enlighten me
thanks in advance
Programs are not going to break out of the sandbox when you disable Drop Rights.
Bo
You've disabled UAC yet you don't know what administrator privileges make possible? Hmm...TheGreenHorn wrote:my user account on windows 8 x64 runs with UAC disabled
so the sandboxie should have admin rights itself
but what if i grant admin rights for a programm in a sandbox?
i don't understand what that menas
GreenHorn wrote:why can i set drop rights? what is this function for?
tzuk wrote:
The setting in this page causes Sandboxie to strip administrative rights from programs running in this sandbox.
Specifically, the security credentials used to start the sandboxed program will not include membership in the Administrators and Power Users groups.
Note that this has little effect if you are already running under a non-Administrator user account.
On one level it's an extra bit of restriction on software running in a sandbox, not allowing installations or system file updates for example, even though such changes would take place in the sandbox you may not want software or users to have that ability.
Notice the settings box says it's similar to the DropMyRights utility, you can read about that HERE.
TheGreenHorn, I like this thread about Drop Rights, is a little old but is good read. I go along the thoughts exposed in posts #2, #3 and #4 in page 2. Put special attention to Tzuks post, also on page 2.
http://www.sandboxie.com/phpbb/viewtopi ... s&start=15
Bo
http://www.sandboxie.com/phpbb/viewtopi ... s&start=15
Bo
Last edited by bo.elam on Fri Sep 07, 2012 4:58 pm, edited 2 times in total.
Who is online
Users browsing this forum: No registered users and 1 guest