Drop Admin Rights

DropAdminRights is a sandbox setting in Sandboxie Ini. It specifies whether Sandboxie will strip Administrator rights from programs running in this sandbox.

Usage:

   .
   .
   .
   [DefaultBox]
   DropAdminRights=y

The setting in this page causes Sandboxie to strip administrative rights from programs running in this sandbox.

Specifically, the security credentials used to start the sandboxed program will not include membership in the Administrators and Power Users groups.

Note that this has little effect if you are already running under a non-Administrator user account.

Related Sandboxie Control setting: Sandbox Settings > Restrictions > Drop Rights

Jump to
Sandboxie Ini
setting:

Global Settings:

ByteOrderMark

AlertProcess

ForceDisableSeconds
ForceDisableAdminOnly

EditAdminOnly
EditPassword
MonitorAdminOnly

Sandbox Settings:

Enabled

FileRootPath
IpcRootPath
KeyRootPath

AutoDelete
NeverDelete
DeleteCommand

AutoRecover
AutoRecoverIgnore
RecoverFolder

AutoExec

BoxNameTitle
BorderColor

CopyLimitKb
CopyLimitSilent

ForceFolder
ForceProcess
LingerProcess
LeaderProcess

NotifyInternetAccessDenied
NotifyStartRunAccessDenied

BlockDrivers
BlockFakeInput
BlockWinHooks

DropAdminRights

OpenFilePath
OpenPipePath
ClosedFilePath
ReadFilePath

OpenKeyPath
ClosedKeyPath
ReadKeyPath

OpenIpcPath
ClosedIpcPath

OpenWinClass
OpenClsid
OpenProtectedStorage
OpenCredentials

InjectDll

See also:

Expandable Variables Shell Folders Program Name Prefix Deprecated Settings

Top