admin sandbox problem

[Arcanez]

when I want to test out programs I install them sandboxed obviously and whenever the program I want to test needs admin privileges it will be installed into "C:/Sandbox/Administrator/Sandboxname/drive/c/program files/ folder xyz

the problem is that I always stay in my standard account in windows and so when I run my C drive sandboxed to browse to the location of the installed program that I want to test, the folder is not there. So the only way to run the program is to browse in the sandboxie container into the administrator container and run the program from there which sucks...

Also sandboxie shows that the sandbox where I installed the test program is empty (windows standard user account) so automatic deletion won't delete the items that I installed with admin rights....




In short:

-Everything that I install sandboxed with admin privileges will stay on my computer (inside the container) until I log onto my admin windows account and empty the sandbox from there.

-Everything that I install sandboxed with admin privileges while using my windows standard account is invisible for the standard account

Is there anything I can do to be able to use sandboxie only with my windows standard account but being able to manage everything installed sandboxed with admin rights??

[Arcanez]

Everything that is installed sandboxed that DOES NOT require Admin rights can be seen as a standard user when you go to the install location.

Everything that is installed sandboxed that DOES REQUIRE Admin rights is invisible for the standard user when you go to the install location.

[tzuk]

You don't give any details. But in my experience, on Windows with UAC elevation, it works as expected: You install in a standard user account, and the software is visible in the standard user account.

[Arcanez]

when an application asks for admin rights and I install it sandboxed, the files go to the Admin Sandboxie Container and when I want to go to the installation folder on my standard account it is not there (well it is but for me it is not visible). When I log onto my admin windows account and go to the same install location I can see the files....................I don't get it......................

EDIT: tried it one more time and it behaves like I explained. I just downloaded a random program and installed it into a sandbox. The program asked for admin rights and I installed it. Then I went to the install location but nothing was there. Also the sandbox was empty. Then I went to the Admin Sandboxie Container and the files were there....

Just recognized when I log onto my admin windows account (which I rarely do) Sandboxie is not started automatically. However on my standard account Sandboxie starts when windows starts. I just don't know why sandboxie doesn't run automatically on my admin windows account. Maybe that has something to do with this whole problem??

in msconfig sandboxie is NOT added as a startup program but why does it launch on my standard account when windows starts. So weird....

[Arcanez]

ok fixed that, sandboxie does now run every time I start the computer on both accounts (admin, standard user). But that didn't solve the problem with Installing apps sandboxed and being invisible for the standard user.

Holy crap this is so complicated to explain, now once again step by step: (perspective from a standard user account Win7x64):

1. I start my browser (sandboxed) and download a random application that does require admin rights to be installed ( example: CCleaner)

2. I run the application (example CCleaner) to install it into a sandbox.

3. The application asks for admin rights and installs.

4. At that moment my Sandboxie Control shows that the sandbox where I installed the application has files in it. (Normal)

5. Directly after installation finished the app asks me to launch it. Now there are 2 Options that can happen here:

5.1: If you launch the app immediately after installatin finished the sandbox still contains all the files ( you can see in sandboxie control)

5.2: If you launch the app later and just finish installation without launching the app immediately, the sandbox will be cleared due to auto delete.

6. No matter how you decide in steps 5.1 and 5.2, the files of the installed app remain on your computer inside the Admin Container because the app was installed with admin rights.

7. The standard user however can't see the installation folder of the installed app when he goes to that location.

8. The standard user can only get rid of the installed files when he goes to the Admin Sandboxie Container and completely deletes it.



Hope that was clear enough!

[tzuk]

Which version of Sandboxie do you use? In old versions, elevation to an administrator account from a standard user account, would cause Sandboxie to continue the installation in the sandbox of the administrator account.

Also, this special handling only occurs with default UAC elevation. If you have something else which manages your elevations, that might also explain the problem.

[Arcanez]

Which version of Sandboxie do you use? In old versions, elevation to an administrator account from a standard user account, would cause Sandboxie to continue the installation in the sandbox of the administrator account.

Also, this special handling only occurs with default UAC elevation. If you have something else which manages your elevations, that might also explain the problem.

I'm running the latest Sandboxie version 3.68 64bit with Experimental Protection. UAC is set to standard (always notify me when programs try to install software, I change windows settings). I don't think I have anything that manages the elevation it's just the normal setting of UAC in Win7. I run Appguard along with Sandboxie but Appguard is not doing anything that could cause this. Also Sandboxie and Appguard run well besides each other without any conflicts.

Some applications don't require admin rights (those don't have that blue/yellow shield icon beside the application icon) and those install into my standard use container of sandboxie without elevation. Some others that need admin rights always go to the admin sandboxie container and are invisible for me (standard user) after installation....

[tzuk]

If you think AppGuard may have something to do with it, then you should temporarily remove AppGuard to see if it makes any difference.