cmd.exe: SBIE1308 Program cannot start due to restrictions - cmd.exe

Every time I wake up my PC after sleeping and Chrome was opened, I get this message:

Code:

cmd.exe: SBIE1308 Program cannot start due to restrictions - cmd.exe [Chrome_MrX]

chrome.exe is the only one allowed to run in such box.
Anyone knows what chrome is trying to do to trigger it?

Also after waking it up, if I close Chrome some programs inside the box linger around and I have to kill them manually:

 

Sandboxie Plus > View > Keep Terminated

You can see the terminated processes in the interface by selecting Keep Terminated. You may be able to get the information you need from the command line of cmd.exe.

 

Thanks @busy

@DavidXanatos
I did research spending part of the morning and found that the latest two versions of Sbie+ are conflicting somehow with Internet Download Manager and its chrome extension, ie, 1.10.2 and 1.10.1. Previous versions don't have issues, I tested with 1.10.0 and 1.9.8

Read first post to understand.

Spoiler: Sandboxie.ini

Code:

Enabled=y
BlockNetworkFiles=y
BorderColor=#0423ee,on,2
BoxIcon=C:\Users\MrX\AppData\Local\Google\Chrome\User Data\Mr.X\Google Profile.ico,0
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
AutoRecover=n
AutoDelete=y
UseFileDeleteV2=y
UseRegDeleteV2=y
BoxNameTitle=n
ShowForRunIn=n
ClosePrintSpooler=y
CopyLimitKb=-1
DropAdminRights=n
LeaderProcess=chrome.exe
LingerProcess=chrome.exe
UseSecurityMode=y
UsePrivacyMode=y
UseRuleSpecificity=y
ClosedIpcPath=!<StartRunAccess>,*
ProcessGroup=<StartRunAccess>,regsvr32.exe,IDMMsgHost.exe,IDMan.exe,cmd.exe,chrome.exe
ClosedFilePath=<BlockNetDevices>,InternetAccessDevices

 

The InternetDownloadManager template (and several others) are blank in Templates.ini for v1.10.1 and above (probably deprecated?).
See if replacing it by Templates.ini from v1.10.0 (or below) helps and report here. That will also give @DavidXanatos some leads.

 

LOL you're right
IDM template had been deprecated since v1.10.1 /sigh
Why I wonder why?

Anyway it is not a big issue, I can handle it in Sandboxie.ini

 

https://github.com/sandboxie-plus/Sandboxie/issues/991

 

Thanks again @busy for your input.

What I expected is to run Chrome sandboxed and IDM to contact the unsandboxed IDM instance using network sockets and then download started unsandboxed.

For me all was working fine before removing the template. I put it back into my ini file and all is good again.
Perhaps there's something I still don't understand yet...