In this release, we have introduced several key features and improvements. A new "Sandboxie\All Sandboxes" SID has been added to the token creation process, fundamentally altering the mechanism for token creation, which can be activated with "UseCreateToken=y". Additionally, users can now configure the "EditAdminOnly=y" setting on a per-box basis, and a new UI for CoverWindows is available in the NewBoxWizard. We have also added a UI option to start unsandboxed processes while forcing child processes into a sandbox. An important new feature is the "AlertBeforeStart" option, which prompts a warning before launching a new program into the sandbox if the initiating program is not a Sandboxie component. Various fixes have been made, including resolving issues with proxy authentication, memory leaks, and driver verifier problems. Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.14.1 Added Add "Sandboxie\All Sandboxes" SID into token with SandboxieLogon #3191 To use this feature SandboxieAllGroup=y must be enabled Note: that this fundamentaly changes the mechanism Sbie uses for token creation, the new mechanism can be enabled separately with "UseCreateToken=y" Added "EditAdminOnly=y" can now be configured per box Add UI for CoverWindows in NewBoxWizard. Add UI option to start unsandboxed process but force child processes in SelectBoxWindow. Add option "AlertBeforeStart".When it is set,a prompt pops up before launching a new program into the sandbox using "Start.exe" and checks if the program that started "Start.exe" is a Sandboxie component itself,if it is not, a warning pops up. Add option for EditAdminOnly in SetupWizard. Changed split the advanced new box wizard page in two reorganized box options a bit Fixed fixed issue with proxy authentication setting fixed memory leak in sbiesvc fixed issue with inconsistent WFP option application #3900 fixed resource leak in buffer hashing function fixed DLL name corruption when BlockInterferenceControl is enabled #3945 fixed issue with driver verifier
So far so good (on Win7x64 SP1, v1.14.1 portable) Some questions: [1.14.1] Can "UseCreateToken=y" be added to [Global Settings] section of sandboxie.ini? [1.14.0]: About units: ProcessMemoryLimit=73 means 73kB or 73MB or ..?
@soccerfan Yes, it can be added. However, if you are using a Microsoft account, it will not work due to a bug. Byte
Yes, at least it works on my Win7 VM. "This feature enables applications to protect their own onscreen window content from being captured or copied through a specific set of public operating system features and APIs." https://learn.microsoft.com/en-us/w...r/nf-winuser-setwindowdisplayaffinity#remarks.
Thanks for checking this out. Much appreciated Also, isn't CoverWindows supposed to be CoverBoxedWindows?
