Sandboxie-Plus v1.12.0

Code tags can live within Spoiler tags, look:

Spoiler

Code:

[GlobalSettings]

Template=Edge_Fix
Template=RpcPortBindings
Template=WacomTablet
Template=WindowsLive
Template=OfficeClickToRun
Template=WindowsRasMan
Template=RocketDock
Template=Microsoft_Security_Essentials
Template=7zipShellEx
Template=RoboForm
Template=Listary
Template=AdobeAcrobatReader
Template=LogitechSetPoint
Template=DigitalPersona
Template=OfficeLicensing
ActivationPrompt=n
FileRootPath=\??\%SystemDrive%\Sandbox\%USER%\%SANDBOX%
KeyRootPath=\REGISTRY\USER\Sandbox_%USER%_%SANDBOX%
IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION%
EditAdminOnly=y
NetworkEnableWFP=y
ForceDisableSeconds=180
UseFileDeleteV2=y
UseRegDeleteV2=n
UseSbieDeskHack=y
SandboxieLogon=y
ApproveWinNtSysCall=SetInformationFile
ApproveWinNtSysCall=OpenKeyEx
DefaultBox=DefaultBox
RamDiskSizeKb=3145728
EnableObjectFiltering=n
RamDiskLetter=R:\
# UseNewSymlinkResolver=n
NoRestartOnPCA=y

[DefaultBox]

ConfigLevel=10
AutoRecover=y
Template=Firefox_Session_DirectAccess
Template=Firefox_Cookies_DirectAccess
Template=Firefox_Bookmarks_DirectAccess
Template=Firefox_Force
Template=Chrome_Bookmarks_DirectAccess
Template=Local_OperaDev
Template=FreeDownloadManager
Template=Chrome_Force
Template=Edge_Force
Template=OpenBluetooth
Template=FileCopy
Template=Yandex_Force
Template=Yandex_Cookies_DirectAccess
Template=Yandex_Preferences_DirectAccess
Template=Edge_Preferences_DirectAccess
Template=Edge_Cookies_DirectAccess
Template=Edge_History_DirectAccess
Template=IExplore_Force
Template=SkipHook
Template=Yandex_History_DirectAccess
Template=Intel_HD_Graphics
Template=Thunderbird
Template=Opera_History_DirectAccess
Template=Opera_Cookies_DirectAccess
Template=Opera_Preferences_DirectAccess
Template=Opera_Profile_DirectAccess
Template=Opera_Bookmarks_DirectAccess
Template=Chrome_Profile_DirectAccess
Template=LogitechScrollApp
Template=IExplore_Favorites_RecoverFolder
Template=Replay_Media_Catcher
Template=Local_Opera18
Template=OrbitDownloader
Template=nVidia_nView
Template=FileEx
Template=AdobeAcrobatReader
Template=Chrome_Preferences_DirectAccess
Template=Chrome_Cookies_DirectAccess
Template=Chrome_History_DirectAccess
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
RecoverFolder=
BorderColor=#00ffff,ttl,6
Enabled=y
AutoDelete=y
LeaderProcess=firefox.exe
LeaderProcess=uedit64.exe
LeaderProcess=chrome.exe
LeaderProcess=opera.exe
LeaderProcess=launcher.exe
ForceFolder=
ForceFolder=
ForceFolder=
ForceFolder=
ForceFolder=
CopyLimitKb=3278155
OpenFilePath=
OpenFilePath=
OpenFilePath=
OpenFilePath=
OpenFilePath=
OpenFilePath=
OpenFilePath=


AutoRecoverIgnore=.log
AutoRecoverIgnore=
AutoRecoverIgnore=
AutoRecoverIgnore=.fdmdownload

AllowNetworkAccess=<BlockNetAccess>,n
PromptForFileMigration=n
ClosedFilePath=<BlockNetDevices>,InternetAccessDevices
UseFileDeleteV2=n
DropAdminRights=y
FakeAdminRights=y
ForceFolderDisabled=
UseRamDisk=y

[UserSettings_11D60286]

SbieCtrl_UserName=
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_WindowCoords=596,322,1237,703
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=n
SbieCtrl_TerminateWarn=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_ProcessViewColumnWidths=250,70,300

[TemplateSettings]

[Template_Local_Opera18]

Tmpl.Title=Local_Opera18
Tmpl.Class=Local
Tmpl.Class=WebBrowser
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=powerpro.exe,

[Template_Local_OperaDev]

Tmpl.Title=Local_OperaDev
Tmpl.Class=Local
Tmpl.Class=WebBrowser
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=opera.exe,
OpenFilePath=powerpro.exe,

[UserSettings_11200270]

SbieCtrl_UserName=
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_WindowCoords=1217,774,1507,768
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=y
SbieCtrl_HideWindowNotify=n
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_SettingChangeNotify=n
SbieCtrl_TerminateWarn=n
SbieCtrl_RecoverTarget=
SbieCtrl_RecoverTarget=
SbieCtrl_RecoverTarget=
SbieCtrl_RecoverTarget=
SbieCtrl_SaveRecoverTargets=y
SbieCtrl_ReloadConfNotify=n
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_EditConfNotify=n
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=y
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_AutoStartAgent=SandMan.exe -autorun
SbieCtrl_HideMessage=2101, OpenProcess (C0000022) access=00001410 initialized=1
SbieCtrl_HideMessage=2101, OpenProcess (C0000022) access=00001400 initialized=1
SbieCtrl_HideMessage=2101, OpenProcess (C0000022) access=00001410 initialized=
SbieCtrl_HideMessage=2101, ConnectPort (C0000022) access=001F0000 initialized=1
BoxDisplayOrder=DefaultBox,3208,7996,10496,15364,15368,15460,15484,15588,15600,15620,15680,15712,15764,15800,15836,15840,16036,16112,16560,16832,16852,16940,17024,17240,17264,17284,17336,17372,17380,18204,18256,18580,18596,18888,18904,18964,18848,19092,19028,19044,19624,20240,16400,17544,18660,18804,19008,19508,19572,19628,19644,19696,19740,6900,12396,18532,18812,19692,19996,20128,20472,20512,20536,20552,20564,20588,20620,20640,20652,20744,20764,20800,21740,22048,1764,2348,3356,19652,22368,22496,3348,22948,22964,12612,18276,17276,24348,24412,10500,6824,19312,6640,11152,12380,23768,23812,3888,1316,2100,9104,12332,13536,22152,22164,19504,24156,21896,10532,16648,17952,14652,17272,21164,19144,6620,23988,14028,20304,18588,22360,23440,3940,20400,23872,5384,19172,19220,23148,18124,22448,9452,2736,3972,5200,5828,11476,12064,4952,7308,7356,7632,21100,21916,22252,23784,15888
BoxGrouping=:DefaultBox

[UserSettings_4BC00582]

SbieCtrl_UserName=
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_HideWindowNotify=n
SbieCtrl_WindowCoords=200,150,1237,703
SbieCtrl_ActiveView=40021
SbieCtrl_TerminateWarn=n

[UserSettings_138202A9]

SbieCtrl_UserName=
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_WindowCoords=85,112,2475,1259
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_HideWindowNotify=n

[UserSettings_0C48020D]

SbieCtrl_UserName=
SbieCtrl_WindowCoords=200,150,1237,632
SbieCtrl_ActiveView=40021

[UserSettings]

SbieCtrl_AutoStartAgent=SandMan.exe
AutoRecover=n
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
ConfigLevel=10
SbieCtrl_EnableAutoStart=y
BoxDisplayOrder=Internet,Updaters

 

Nice! But as they say - there are many roads that lead to Rome! I still don't see the disadvantage of publishing the info via Dropbox which by the way seems better equipped to represent such ini-files in a color-coded manner thereby offering superior overview at a glance.

 

@stapp, @DavidXanatos
Don't get me wrong here, I could live with a conventional, manual update-check, too.

But then again all those (drop-down)-option-choices in the "Global Settings"/"Support & Update"/"Sandboxie Updater"-section will have to be removed, too, as all those choices about what to do in case of a "Version Update" or "New Versions" ranging from "Notify" to "Download & Install" will have become completely moot by then.

It is either - or, mere info or independently working auto-installer (or even both), but you certainly cannot have it both ways by leaving a defunct pseudo-auto-installer behind without misleading the users and creating major confusion.

 

No why they govern how to auto updater works, it checks in the pre-set interval and then takes action or not depending on these presets.

 

Yes, I totally get that. But then these settings need to trigger an automatic download together with automatic installation - if set accordingly, a feature which does not work properly as of yet.

I was just reacting to the opinion that you could leave things where they currently stand - with the Sbie-updater-section only showing info and the actual update-requiry only possible/triggered via the Menu/Help/"Check-for-updates"-route, that is.

 

So what you are saying is that the UI should trigger an update check instantly whenever these settings get changed, instead of waiting for the next preset interval?

 

Either that - as you seemingly tried to explain yourself a few days ago an instant update-check would be performed automatically whenever that updater-page is opened manually by the user whereas when the periodical check gets disabled altogether then a link for immediate check would become visible - or the minimum interval could be shortened or....or.. .

But to avoid flooding the net with hourly checks the best solution from my point of view would be to simply leave that link for immediate check always there, visible and active, regardless of the periodical-check-setting.

And yet the real problem actually is that so far I have never seen an automatic download & install been triggered by that updater-page at all. First any new intermediate version a, b, c had not been detected at all, ok, that was a bug probably fixed by now. But currently the availability of a new intermediate version is recognized - and still nothing seems to happen, with no imminent auto-download&install being triggered as one would expect, even when the corresponding option is explicitly set to "download & install". So when the check-interval is set to the minimum-1-day - when (if ever) would an automatic download & install be triggered? I have never seen that happen. Only way so far has been to actively call the update-check via the Help-menu.

 

the page is not supposed to trigger an install, the check the page performs only populates the information's on it.

It is intentional that only the hemp menu and the internal timer can trigger an update.

I'm sorry for the confusion an "update check" is not always the same as an "update check" LOL

That said the question is now what behavior would users find best/expect?

 

Ok, so if the "page is not supposed to trigger an install" (and never has been) - what on earth then do those drop-down-options "Ignore/Notify/Download&Notify/Download&Install" mean or are supposed to mean? They are completely moot and without function then!

If I understand you correctly now this page is only meant to ask for an updated version present once within the check-interval set and to show that information (= display the very latest version-number).

How on earth could that be then "Ignore"-d? The mere info would already be shown, nothing to possibly be ignored. The second option "Notify" is what the page already does, nothing further, nothing less. But now it starts to get weirder and weirder! "Notify & Download" - not followed by an actual download? What is that supposed to mean? The info is already there but a possible download would have to be initiated manually by the user from somewhere else? And then come "Download & Install"! If the user doesnt manually initiate any download via the Help-menu then this option (when set) will perform neither! In fact it will trigger no action at all. So the bottom line is it will be completely defunct!

Now that is really weird! 4 possible options that would make absolutely no difference with respect to their setting? The mere info is already there so it must be deemed absurd to set this option to "ignore" it - and the other two options will trigger no action at all! That reminds me of a fake-elevator with 4 level-buttons to select from - yet which ever one might choose - the so called "elevator" turns out to be a broom-closet on the ground-floor not capable of moving even for an inch.

 

A new version of Microsoft Edge 118.0.2088.76 (Official build) (64-bit) came out so I did another clean install of Sandboxie Plus 1.12.0 (64-bit) to test. Same thing happened as before. I turned on Auto Delete and opened Microsoft Edge two times and the extensions are gone. This only happens with Microsoft Edge.

 

Have you had a chance to try the info in the link given by @busy in post #21?

 

No, because using this requires Edge_Profile_DirectAccess. That kinda defeats the purpose of using Sandboxie as a security measure. Plus this issue only affects the latest beta version 1.12.0 and not previous versions, at least for me. Since this is directly related to the Auto Delete function, I'm reporting it so it gets fixed in the stable version.

 

@DjKilla
Are you experiencing this problem even though there is no OpenFilePath directive defined for Microsoft Edge?

 

I'm running tests again all day today. It may be stupid Microsoft again with their Edge updates that's causing the issue along with the Auto Delete setting in Sandboxie Plus. I'll have more info later.

UPDATE: The latest 2 to 4 versions of Edge is what's causing the extensions disappearing issue. I installed the last version Sandboxie Plus 1.11.4 64-bit and have this issue also, so it's not just the latest 1.12.0 version. It ONLY happens when you turn on the Auto Delete setting in Sandboxie Plus so it looks like the latest versions of Edge changed or broke something that's related/connected to Auto Delete in Sandboxie Plus.

@busy - The following Edge setting in my sandboxie.ini are the following:

Template=Edge_Force
OpenFilePath=msedge.exe,C:\Users\Rockin' Jerry\AppData\Local\Microsoft\Edge
ProcessGroup=<InternetAccess>,thunderbird.exe,msedge.exe,firefox.exe
ProcessGroup=<StartRunAccess>,thunderbird.exe,plugin-container.exe,msedge.exe,firefox.exe

The following does not apply/work:
NormalFilePath=msedge.exe,|%LocalAppData%\Microsoft\Edge\User Data\Default\Secure Preferences

 

@DjKilla
This problem most likely started with Microsoft Edge version 118 (version 116 was ok). There is likely a mismatch in the hash calculations of the Secure Preferences file inside and outside the sandbox. As a result, some settings are reset when you start a new browser session.

Unless this issue is fixed by @DavidXanatos , Secure Preferences settings will be lost when using OpenFilePath with Microsoft Edge. Additionally, OpenFilePath ignores snapshot files and uses files from the opened path.

Workaround: (for Microsoft Edge 118+)

1. Don't use OpenFilePath

2. Try the following without the pipe ('|') character.
[changes made to the Secure Preferences file will not persist when you run Edge in a sandbox. (You will need to install extensions from outside the sandbox).]

Code:

NormalFilePath=msedge.exe,%LocalAppData%\Microsoft\Edge\User Data\Default\Secure Preferences

 

@busy - That fixed it. The pipe is why it didn't work the first time but removing it was the trick. All the settings I posted above are the same, I just added the path you gave to the sandboxie.ini file. Thanks again!

 

I'm starting to get a little worried by now. Is this site/project still alive and well? At least I would hope so!

 

You know people need breaks or holidays especially when they do stuff besides their main work. It's barley two weeks give him a break

 

No problem with holidays, if that's the reason, or a congress perhaps. Although 15 days are already in excess of "barely 2 weeks". So let's hope the reason for that break is at the least a pleasant one.

 

Another couple of weeks or so, per "reliable" sources

 

I have some unexpected family maters to attend to this will presumably take one more week.

 

I hope is nothing bad. All the best to you and your family.