Figured I'd put up a warning...if you get this error, make sure you also don't have the "Drop Rights" feature enabled

Hello Writhdu,

Thank you for help.

Before your last post, I decided to set up a Standard User Account to try Sandboxie within it. (I have not got there yet completely, as I have read your most recent post and am in need of again, still my more advice). Vista told me that to do this, that an Administrator Account must be set up first, before setting up a Standard User Account. I have been using just the Administrator Account up until now.I believe some time ago, I had run the Drop My Rights utility within that. I do not know how to reverse that, other than to set up another user account as a Standard user. Is there a way I can reverse the effects of Drop My Rights actions so I can always run on Standard User, and then when prompted to use Administrator privileges to do so by providing the necessary password for it.

I guess what I am asking you is: HOW DO I REVERSE THE EFFECTS OF RUNNING THE DROP MY RIGHTS UTILITY SO THAT IT DOES NOT INTERFERE WIITH SANDBOXIE. Being able to ascertain the safety that Sandboxie will afford me, is the only goal I have in pursuing this forum with you and Tzuk. I do not have the skill nor inclination to have any real need to run my computer with Administrator privileges except when asked for same, when installing some programs.

Shall I leave my Administrator Account with the effects of Drop my Right on, and try to work with Sandboxie in my new Standard User Account, or somehow STOP THE EFFECTS OF DROP MY RIGHTS ALL TOGETHER ( which I would prefer to do) and get on with the safety of having Sandboxie working, like I have read all the other users in the forum doing, with such satisfaction. My difficulties with getting Sandboxie to work for me, has left me despondent, and am only happy about this, because you and Tzuk have continued to assist me in sorting this out.

Again I am looking forward to your resonses,

Mike

The "Drop Rights" feature I mentioned is the one built into Sandboxie (Sandbox Settings -> Restrictions -> Drop Rights).

I'm not sure what you're talking about. Do you mean the program DropMyRights? If so, then all you need to do is not launch your apps with it. But I think you're referring to something else, I just don't know what. The DropMyRights program doesn't do anything permanent to anything. You must launch the target program with the DMR program each time you want to have that effect.

WELL I GIVE UP!!!

I HAVE CONFIGURED MY COMPUTER TO VISTA STANDARD USER, WITH EVERYTHING AT NO EXTRA PRIVILEGES AND THE UAC AS THAT IS ORIGINAL IN THE SET UP. I TRIED TO INSTALL "LAUNCHY" (WWW.LAUNCHY.NET/), A NON-SECURITY PROGRAM IN MY SANDBOXED FIREFOX BROWSER. I RECEIVED THE SAME OLD TIRESOME 1061 MESSAGE AND COULD GO NO FURTHER. WHEN I TRIED TO GO TO THE AREA OF SANDBOXIE IN MY STANDARD USER VERSION OF VISTA WHERE IT STATES TO RUN AS UAC ADMINISTRATOR IT IS NOT THERE! SO HOW CAN I OVERCOME THE 1061 MESSAGE BY TICKING THE RUN AS UAC ADMINSTRATOR IN SANDBOXIE WHEN IT IS NOT EVEN THERE!

I SUPPOSE, NEXT I WILL BE TOLD TO RUN MY VISTA FIREFOX BROWSER UNDER ADMINISTRATOR ACCOUNT PRIVILEGES SO I CAN USE THE RUN AS UAC ADMINISTRATOR IN SANDBOXIE TO OVERCOME THE 1061 MESSAGE! WELL, I KNOW ALREADY THAT THAT DOES NOT WORK, AS I TRIED IT BEFORE SETTING UP THE STANDARD USER OF VISTA. AROUND AND AROUND I GO AND I AM GETTING TIRED OF THIS MERRY-GO- ROUND AND I AM GETTING OFF IT NOW!

MIKE

Is UAC even an option under a standard user account in Vista? I thought this was strictly used under an admin account for security safety.

I experimented with Launchy. I get the ShellExecuteEx error if I have "Drop Rights" enabled. If I don't, I can install OK. Granted, I run as an admin with UAC disabled. Have you tried that config to see if it works for you?

Well, Hello again Wraithdu,

Here is a question I should have asked earlier:

When you indicated in an earlier post "make sure that Drop Rights feature is not enabled in (Sandboxie Settings; Restrictions;Drop Rights)" I was never able to find this feature in Sandboxie. When I go to Sandbox Settings; Restrictions all I see are sections for Internet, Start/Run Access and Low-Level Access. One of these must be the "Drop Rights" that you are referring to, could you elaborate a bit more on which one it is and what I should do?

Thanks for continuing to work with me on this, as in my last post I was ready to quit. I will await your response to this question before I try the config you suggested.

Mike

Umm, what version of SB are you using? This feature was introduced in the 3.33 beta series. Official 3.34 was just released. I suggest you update before we explore this any further, otherwise we're just speaking different languages

Hello Wraithdu,

I purchased my Sandboxie 3.32 program 22 Dec 08. Hence I was not running the Beta 3.33 that you spoke of, and with that had no Drop Rights to utilize or not. I installed program 3.34 on top of the 3.32 and tried downloading Launchy and installing with both the Standard user account and the Administrator user account. Interestingly, I was not able to install with the Vista Standard user account, but was able to download and install within a Sandboxed Browser with the Vista Administrator user account! Also, you are right with Sandboxie 3.34 I have a Drop Rights feature within Restrictions. So, things are starting to make a little sense for me. I hoping now, I can go on successfully to learn this program. I was obviously stuck on the Sanboxed installs not working.

I was not able to remove Launchy out of the Sandboxie to my desktop, I kept getting the message "Destination Folder Access Denied-- You'll need to provide administrator permission to move to this folder. How do I do that? I was using the Administrator user account of Vista to work with the Sandboxed Launchy program. I have the Run As UAC Administrator in Sandboxie checked as Tzuk told me earlier to do. I am hopeful that this question, is just part of the learning curve I have ahead of me, which I expect to have to work on. Being able to install within Sandboxie is a big step in allowing me to progress in understanding of this program.

Very interesting, that the day I decided to call it quits, on this program, the new version would come out, and you would encourage me to install and follow your lead with downloading Launchy in Version 3.34!!

Thank you, so very much, for the patience and advice. I hope that my new found optimism, is not unfounded, and the fruits of your labours will be, my being able to help someone else out successfully with this program in the future.

Kind regards,

Mike

Hmm, not sure why you'd get an access denied message. Under your Vista admin account, I'd try totally deleting your C:\Sandbox directory. Re-download the Launchy installer and see if you can recover the file to your desktop. Perhaps something got messed up with folder permissions while you were switching back and forth between accounts. The directories will be recreated with appropriate permissions once you launch your browser.

mikodo, my advise to you is to turn off UAC and run as Administrator.

From the start, the problems you describe here have been related to UAC and/or standard user accounts and now permissions. So to me it is obvious that these mechanisms are causing you more trouble than they are worth.

I realize there are people who would frown upon this advice, but that's what I would do. (I do run as Administrator but I use XP where thankfully there is no UAC.) That's just a suggestion, take it or leave it.

Or at the very least, you should consider that if you're going to be playing with software installations, then a standard user account is not the ideal environment to do that.

Hello folks,

I will try these things you suggested since my last post. Just not today. I have other responsibilities to attend to, that are more pressing. I will post on my success of downloads after.

Thanks again,

Mike

Hello Wraithdu and Tzuk,

I disabled UAC completely, (I had had it in silent mode, which diminishes the prompts considerably). I re- downloaded Launchy program as an Administrator User and was able to install into the sandboxed browser without any 1061 messages. From there I was able to move it to my desk top without the messages telling me "Destination Folder Access Denied; you'll need to provide Administrator permission to move this folder".

It appears, that the difficulties with installs within a Sandboxed Browser on my Vista OS has been resolved!!!

Thank you everyone,

Mike

Hello again,

Just an update


I had just a little bit of time to play in the sandbox.Everything I tried with my present knowledge is working as smooth as silk. A pleasure to try things, and watch Sandboxie do it's stuff.

Mike

Version 3.35.13 should let sandboxed programs launch other programs "elevated" through User Account Controls (UAC) on Windows Vista.