I have everything working perfectly using the red box with data protection except when I start Firefox, it doesn't show as my default browser. I have Firefox, Thunderbird and Edge sandboxed. The problem is when I click a link in Thunderbird it starts up Edge. On Windows 10 I have Firefox as the default browser. In an orange box everything works as it should. Is there a path that needs to be added to Resource Access for Sandboxie to recognize Firefox as my default browser?
Ahhhh, ok. So it's a related issue. Looks like David is looking to fix this in the next version. This is the only issue I have left and then everything will be working perfectly using the red box with data protection.
Added the three lines and the links in Thunderbird now open the correct default browser which is Firefox. But if I open settings in Firefox it says that Firefox is not the default browser even though it's set in Windows 10 as the default browser. Not a big deal since the links work correctly now and opens the actual default browser which is exactly what I wanted.
That worked! I added the path to the Registry tab in Resource Access, set the program to firefox.exe and made the access read only. Thanks again!
Looks like something still isn't working. So I started with a clean install of Sandboxie 1.9.2 (64-bit) on Windows 10. I opened up the box settings and switched to the Orange box then went through the settings to set everything up including adding the following lines to the sandboxie.ini: NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Classes NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\FileAssociations NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations I have Firefox, Thunderbird and Microsoft Edge sandboxed. I did my first start of Firefox and checked the settings which says that Firefox is my default browser. I close Firefox and first start Thunderbird. I click a link in Thunderbird and it opens my default browser Firefox. I then close Thunderbird, Firefox and first start Microsoft Edge. I then close Edge and start Thunderbird again and click a link and Edge starts up (NOT my default browser Firefox). I then close both Thunderbird and Edge. I start Firefox again and check the settings and it now says Firefox is not my default browser. How can I fix this 'click link' issue in Thunderbird to start my default browser Firefox permanently without Edge taking over as the default browser? Here's my Sandbox.ini settings: Enabled=y BlockNetworkFiles=y BorderColor=#027df7,off,6 Template=OpenBluetooth Template=SkipHook Template=FileCopy Template=qWave Template=BlockPorts Template=LingerPrograms Template=AutoRecoverIgnore Template=Edge_Force Template=Firefox_Force Template=Thunderbird ConfigLevel=10 BoxNameTitle=n UseSecurityMode=y CopyLimitKb=81920 RecoverFolder=D:\Data RecoverFolder=D:\J RecoverFolder=D:\Sweep ForceProcess=thunderbird.exe ProcessGroup=<StartRunAccess>,thunderbird.exe,RuntimeBroker.exe,plugin-container.exe,msedge.exe,identity_helper.exe,firefox.exe,dllhost.exe ProcessGroup=<InternetAccess>,thunderbird.exe,msedge.exe,firefox.exe ClosedIpcPath=!<StartRunAccess>,* AllowNetworkAccess=!<InternetAccess>,n NormalFilePath=firefox.exe,C:\Users\<account name>\AppData\Roaming\Mozilla NormalFilePath=firefox.exe,D:\Data NormalFilePath=firefox.exe,D:\J NormalFilePath=firefox.exe,D:\Sweep NormalFilePath=msedge.exe,C:\Users\<account name>\AppData\Local\Microsoft\Edge OpenFilePath=firefox.exe,C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 OpenFilePath=thunderbird.exe,C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 OpenFilePath=firefox.exe,C:\Users\<account name>\AppData\Local\Mozilla NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Classes NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\FileAssociations NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations ProtectHostImages=y If I can get this link issue fix then I'll be able to create a snapshot, change to the red box with data protection and turn on auto delete. Or should I switch to the red box, create a snapshot, then turn on auto delete? Could be that I was suppose to switch to the orange box, do my app first runs to make sure everything works, then switch to the red box, add my Resource Access>Files paths and Registry paths then create a snapshot and then turn on auto delete. Wish there was a guide to set this up properly. I 'm not even sure what order I should do this. Anyway, thanks for any help again!
I tried with the steps you wrote and the configuration you shared, but the default browser did not change for me. Can you share the contents of the "RegPaths.dat" file in the "X:\Sandbox\.\BoxNameFolder" after replacing the SID values? (like S-1-5-21-X-X-X-1001)
I don't see a RegPaths.dat file. Could it be because I set everything up using the default box? I'm also using O&O ShutUp10 (https://www.oo-software.com/en/shutup10) which changes both Windows and Edge settings. I also have Windows Security Controlled Folder Access/Ransomware Protection on which might be the cause. I'll turn it off and see if that makes a difference.
That file is being created when virtualization scheme version 2 is active. If you turned it off from the global settings, add the following to the box settings and try again. Code: UseFileDeleteV2=y UseRegDeleteV2=y
I'll get back to you around 2pm eastern time USA. Looks like turning off the Windows Security Controlled Folder Access/Ransomware Protection is allowing the RegPaths.dat to be created. I just turned off O&O ShutUp10 and I'm going to do a clean install of Sandboxie to see if that fixes everything. I'll post the RegPaths.dat soon after I test a little more. If it's working for you then it's probably some kind of protection on my end that's interfering with Sandboxie.
Found the problem! O&O ShutUp10 is what's causing the default browser issue when clicking a link in Thunderbird. I now have to find out which setting in ShutUp10 is the cause. Here's the RegPaths.dat info with the current issue. I'll post later which setting in ShutUp10 caused this whole mess. \registry\machine\software\Classes\Undecided\shell\open\command\$DelegateExecute|1 \registry\machine\software\Classes\Unknown\shell\Open\command\$DelegateExecute|1 \registry\machine\software\Classes\Unknown\shell\openas\command\$DelegateExecute|1 \registry\machine\software\Classes\Unknown\shell\OpenWithSetDefaultOn\command\$DelegateExecute|1 \registry\machine\software\microsoft\SecurityManager\CapAuthz\HasRepaired|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Mozilla\Firefox\Installer\308046B0AF4A39CB\$installer.taskbarpin.win10.enabled|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Mozilla\Firefox\Default Browser Agent\$C:\Program Files\Mozilla Firefox|ServicesSettingsServer|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\msi\$MRUList|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\CIDSizeMRU\$2|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU\$1|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webp\UserChoice|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Feeds\$EdgeMUID|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\CurrentVersion\Run\$MicrosoftEdgeAutoLaunch_98AC93F86997A36D3F66D1906DC182D6|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Edge\IEToEdge\$DisabledPendingAutoUpdateConsent|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Edge\Profiles\Default\$MUID|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Edge\PreferenceMACs\Default\$media.cdm.origin_data|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002\software\Microsoft\Edge\PreferenceMACs\Default\$extensions.settings|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002_classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3498\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\$GroupCollapseState|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002_classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\87\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\$GroupCollapseState|1 \registry\user\S-1-5-21-3060758674-1623963045-3964019268-1002_classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\18\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\$GroupCollapseState|1
Can you try the following settings? Edge running in the sandbox will no longer be able to change those settings. Code: ReadKeyPath=msedge.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ ReadKeyPath=msedge.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\
Took me a while but it looks like this one setting in ShutUp10 is what was causing the problem. It's 'Disable Sidebar in Microsoft Edge' which is the new Bing icon that opens up a sidebar with additional apps to use that was added recently in an update to Edge. Thanks Busy for your help! If anything happens, I'll be sure to try the paths you listed in your last post. For now everything works perfectly.
dont touch it unless you known which user is behind that SID. windows copy on logon the S- folder to current user and writes it back on logoff. if this is the current logged in user changes there dont have any effect.
Updated to Sandboxie 1.9.3 (64-bit) on Windows 10 and ran into some issues. I saw that the following lines are now included in the templates.ini: NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Classes NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\FileAssociations NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations The issues I ran into is when I created an orange box, Edge took over again as the default browser even though Firefox is my actual default browser. So when I clicked a link in Thunderbird, Edge would open instead of Firefox. But thanks to Busy again, I added the following lines he posted above to my sandboxie.ini which fixed the issue: ReadKeyPath=msedge.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ ReadKeyPath=msedge.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\ I then switched to the red box and discovered when I checked Firefox settings, Firefox was no longer my default browser. But I used the paths Busy posted and changed the program to Firefox which fixed the issue: ReadKeyPath=firefox.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ ReadKeyPath=firefox.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\ I then discovered my Thunderbird links again switched to Edge. Yea, really annoying! So I repeated the steps above but this time changed the program to Thunderbird: ReadKeyPath=thunderbird.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ ReadKeyPath=thunderbird.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\ Now my red box and programs (Edge, Firefox, Thunderbird) work perfectly! I can't thank Busy enough for taking the time and having the patience to not only help me out but others as well. Thank you, thank you, thank you!
@DjKilla just a thought (assuming you are in sbie plus v1.9.3): In your red box, can you comment out all of busy's lines and add just this less restrictive line: Code: NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\* If everything works, maybe @DavidXanatos can fix [TemplatePModPaths] in Templates.ini by just appending "\*" to the last line in that template, which currently reads: NormalKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations
Sure can. I'll test everything shortly and hopefully this will work. I'm always about making everything as simple as possible.
Did a clean install, removed all of the lines (6 total) I posted above for each program and added just the one line soccerfan posted to my sandboxie.ini. Edge took over as the default browser again instead of Firefox and the links in thunderbird also opened up Edge and in the Firefox settings it changed to not being my default browser so unfortunately, this didn't work. Using the 6 lines above allows each program to see what the default browser is. This does give me some ideas using the '\*' at the end of some of the paths. I'll play around with some of the paths and see if maybe I can get all of my programs to recognize the default browser more easily.
@DjKilla What other programs are running on that box? Also you can see which programs are accessing those keys from the trace logger. Plus > View > Trace Logging > Select Box > Switch to "Trace Logging" tab from bottom > Select: "Type": "Key" > Ctrl+F to open finder dialog > Paste the last part of the registry key into the box (ex. FileExts, UrlAssociations) > Uncheck "Highlight" > Run programs
I haven't tried what you posted yet but I did find the following two lines added to sandboxie.ini works perfectly: ReadKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\ ---> This allows all programs to see and respect what the default browser is. ReadKeyPath=HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\ --> This allows links clicked in Thunderbird (probably other programs too) to open the correct default browser.
