Hi,
I am using Sandboxie ver 3.3.2 and an NComputing X300 set up with version 4.03.098. I want to force Internet Explorer 7 to run in a sandbox on any user terminal. I logged onto the main ncomputing console and set up "iexplore" in the forced program box in Sandboxie.

If I open IE7 on the main console (logged on as administrator) it opens sandboxed as expected. However on other terminals (logged on as a normal user) it terminates with a "Program failed to initialize correctly" message. I tried another program (TuxMath) and got the same result.

There is nothing obvious showing up in the Event Viewer.

Anyone got any ideas what the problem might be?

Thanks.

I'm guessing you have Sandboxie in order to run some software that doesn't normally work with X300?
In that case your sandbox may be set up for that particular software.

Try to create a separate sandbox to run Internet Explorer.
You can do that from Sandboxie Control > Sandbox menu > Create New Sandbox.
You can then force Internet Explorer to that new sandbox.

Let's see if it makes a difference.

Hi tzuk,
Sorry I just got a chance to look at this problem again. No, Internet Explorer runs fine unsandboxed with X300s I just wanted the students who are using the X300 terminals (which are thin-client boxes which plug into PCI cards in the PC) to be forced into a sandbox if they open Iexplorer.
I logged on as administrator and installed the software on the actual PC and set forced programs to "iexplore". If I log in to one of the x300 terminals as say "user6" I get the "Program failed to initialize correctly"message.
So I tried setting up a shortcut to a sandboxed browser on that user's desktop.
When I clicked that, I got message SBIE1406 Missing or Invalid Expansion for Personal: [C0000034] followed by SBIE1203 Cannot build path list (Error in OpenPipePath).
Effectively these terminals all support a local user at the same time. Does each local user have to have a different setting somewhere in the sandboxie.ini file for example?


Any pointers gratefully accepted.
Cheers.

Sandboxie is trying to figure out the location of the My Documents folder for the current user account, by looking at a "shell folder variable" called Personal. It fails, and we need to understand the reason for this.

You should be able to find the definition for Personal in this registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

Please tell me what you see listed for the Personal registry value, for a user account that fails to run IE sandboxed.

Hi again,

The registry value Personal contains %USERPROFILE%My Documents,

the username is of the format wsb-x3-4\USER6

Thanks for your help.

The [C0000034] detail in the SBIE1406 message that you quoted earlier indicates Sandboxie can't find this Personal value in the registry location that I mentioned earlier:

KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

So I was expecting you to say that this registry key does not contain a value for "Personal", because that would sit well with the [C0000034] detail.

Were you running RegEdit through the terminal?

OK, I've done my best to avoid asking until now, but since another forum message about a problem with the shell folder value for %Personal% has been posted, with a reference to this message - I have to ask
Is this a mistype:
%USERPROFILE%My Documents

Doesn't "Personal" actually have the value
%USERPROFILE%\My Documents

I assumed it is a mistype. But a missing backslash should not cause SBIE1406.

primaveranz, do you use Active Directory User Folder Redirection? I've received a problem report in email that is very similar to your problem but it explicitly states they employ this Active Directory function.

I tried to reproduce the problem but was not successful. So I have this workaround, available in version 3.35.12. You can now tell Sandboxie a "default" registry value to use if it can't find the real registry value.

You do that by editing Sandboxie.ini (use the Configuration > Edit Configuration menu command). At the top of the file, just below the [GlobalSettings] header, add this:



Then use the Configuration > Reload Configuration, and this error should hopefully be resolved.

To download version 3.35.12, see this forum topic:

http://www.sandboxie.com/phpbb/viewtopic.php?t=4985

Could a similar workaround be implemented for the problem in this thread:
http://www.sandboxie.com/phpbb/viewtopic.php?t=4990&postdays=0&postorder=asc&start=13
which references the absence of this key on some systems:


rather than having the installer take care of it?

No. These are entirely unrelated issues.

Yep sorry it is a mistype! Unfortunately the machine is at a location that I only get to about every fortnight hence the paucity of replies from me. I hope to be there later today or tomorrow and will investigate further.

Cheers.

Hi again, No there should not be any AD redirection on this machine - it is possible I stuffed something up though or it may also be something weird that NComputing does - I saw another reference to the OpenPipePAth in an Ncomputing thread somewhere... so will check a.s.a.p and will follow your advice re downloading new version and changing setting. Thanks for all your help so far!

Hi tzuk,
I tried upgrading to version 3.35.13 and it worked OK on an HP DX7400 which was not running NComputing.
However when I tried it on the Lenovo Thinkcentre running NComputing the upgrade failed trying to run kmdUtil with message "ControlService Stop : Access is denied". I had stopped the Trend Anti virus service and then stopped all the NComp terminals but no luck. So I disconnected the PC from all the terminals and tried doing it stand alone,I tried stopping the sandboxie service first too but same issue I'm afraid.

Just to state the obvious: You should not run the Sandboxie install itself sandboxed.
Try to restart the computer, and make sure to run the installation from a user account that has full Administrator privileges.