Trust No Program
Reply to topic
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Sandboxie Control never writes to Sandboxie.ini directly, regardless of the location of the INI file. Modifications always go through the Sandboxie service. So I think you can put back Sandboxie.ini in C:\Windows.

_________________
tzuk
View user's profileSend private message
Kay


Joined: 12 Dec 2008
Posts: 12
Location: Switzerland
Reply with quote
thats not the point, sandboxie control or service.

Sandboxie itself(its service or the control) wants to write a configuration to C:\windows and that is the issue of the error messages. I copied the configuration files to the directory c:\programs\sandboxie and my user has no rights to handle the configuration file at the location of c:\windows.

It finds Sandboxie.ini at C:\Program Files\Sandboxie but wants to write it to C:\Windows

Quote:

Location

Sandboxie looks for the file Sandboxie.ini in the following folders, in this order:

* In the Windows folder: C:\WINDOWS on most Windows installation; C:\WINNT on Windows 2000
* In the Sandboxie installation folder: Typically C:\Program Files\Sandboxie

The search for Sandboxie.ini ends when an instance of the file is found, and all other instances are ignored.

When Sandboxie Control updates the configuration, it rewrites the file Sandboxie.ini file in the folder from which the configuration was last read.



batch installation file that gets these error messages, I described:

Code:
mkdir C:\Programme\Sandboxie\Sandbox
mkdir C:\Programme\Sandboxie\

xcopy \\serverXY\Sandboxie\Sandboxie.ini C:\Programme\Sandboxie  /R /Y

\\serverXY\Sandboxie\SandboxieInstall /install /S /D=C:\Programme\Sandboxie




batch installation file that gets NO error messages:

Code:
mkdir C:\Programme\Sandboxie\Sandbox
mkdir C:\Programme\Sandboxie\

xcopy \\serverXY\Sandboxie\Sandboxie.ini C:\Programme\Sandboxie  /R /Y
xcopy \\serverXY\Sandboxie\Sandboxie.ini C:\Windows  /R /Y

\\serverXY\Sandboxie\SandboxieInstall /install /S /D=C:\Programme\Sandboxie


thats the Sandboxie.ini

Code:

[GlobalSettings]

EditAdminOnly=yes
BoxRootFolder=C:\Programme\Sandboxie\Sandbox
AutoDelete=yes

[DefaultBox]


BoxRootFolder=C:\Programme\Sandboxie\Sandbox
AutoDelete=yes
AutoRecoverIgnore=.jc!
AutoRecoverIgnore=.part
LingerProcess=trustedinstaller.exe
LingerProcess=wuauclt.exe
LingerProcess=devldr32.exe
LingerProcess=syncor.exe
LingerProcess=jusched.exe
LingerProcess=acrord32.exe
Enabled=y
OpenFilePath=iexplore.exe,%Favorites%
OpenFilePath=X:\WORK\DOWNLOADS
OpenFilePath=%Personal%\WORK\DOWNLOADS
ConfigLevel=4
CopyLimitKb=32000
SbieCtrl_ShowWelcome=N
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=N
SbieCtrl_BoxExpandedView_DefaultBox=N
SbieCtrl_WindowLeft=358
SbieCtrl_WindowTop=202
SbieCtrl_WindowWidth=660
SbieCtrl_WindowHeight=450
SbieCtrl_Hidden=Y
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=Y
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310
SbieCtrl_EnableLogonStart=Y
SbieCtrl_EnableAutoStart=Y
SbieCtrl_AddDesktopIcon=N
SbieCtrl_AddQuickLaunchIcon=N
SbieCtrl_AddContextMenu=N
SbieCtrl_AddSendToMenu=N
SbieCtrl_TerminateNotify=N
SbieCtrl_TerminateWarn=N
SbieCtrl_ExplorerNotify=N
SbieCtrl_ExplorerWarn=N
SbieCtrl_EditConfNotify=N
SbieCtrl_ReloadConfNotify=N
SbieCtrl_HideWindowNotify=N
SbieCtrl_ProcSettingsNotify=N
SbieCtrl_SettingChangeNotify=N
SbieCtrl_ShortcutNotify=N
BoxNameTitle=n
BorderColor=#FF0000
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Kay wrote:
thats not the point, sandboxie control or service.


Well in fact it was entirely my point. The INI file is written by the service, and the service is running under the Local System (SYSTEM) account. Is it possible your SYSTEM account can't access C:\Windows? Highly unlikely.

In any case if you want to put the file in C:\Program Files\Sandboxie then just make sure
(1) that there is such file in C:\Program Files\Sandboxie
(2) that there isn't such file in C:\Windows
(3) and then Reload Configuration
View user's profileSend private message
Kay


Joined: 12 Dec 2008
Posts: 12
Location: Switzerland
Reply with quote
tzuk wrote:
Kay wrote:
thats not the point, sandboxie control or service.


Well in fact it was entirely my point. The INI file is written by the service, and the service is running under the Local System (SYSTEM) account. Is it possible your SYSTEM account can't access C:\Windows? Highly unlikely.

In any case if you want to put the file in C:\Program Files\Sandboxie then just make sure
(1) that there is such file in C:\Program Files\Sandboxie
(2) that there isn't such file in C:\Windows
(3) and then Reload Configuration


Yes youre right about the fact that the SYSTEM account, it can access c:\windows, that was my fault.

(1) yes 100% sure
(2) yes 100% sure
(3) done with reboot

But the Problem really is there, and you can check it easy with my installation script and my configuration above. Of course its really important that there is NO configuration file at C:\Windows.

If theres just a configurationfile at C:\Program Files\Sandboxie you got problems with editadminonly. Please give it a try, thank you
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Very well, I will try as you suggest and post an update. I am however curious why once again the SbieCtrl_Xxx settings appear in a section that is not a [UserSetings_Xxx] section. This time they are in your [DefaultBox] section. Last time it was part of the [GlobalSettings] section. Is this a copy/paste oversight?
View user's profileSend private message
Kay


Joined: 12 Dec 2008
Posts: 12
Location: Switzerland
Reply with quote
tzuk wrote:
Very well, I will try as you suggest and post an update. I am however curious why once again the SbieCtrl_Xxx settings appear in a section that is not a [UserSetings_Xxx] section. This time they are in your [DefaultBox] section. Last time it was part of the [GlobalSettings] section. Is this a copy/paste oversight?


Ok thanks

No I just updated the configuration file. The right place for the SbieCtrl_Xxx is only UserSettings_Xxx ? I want that any new user uses the SbieCtrl_Xxx Settings at the [DefaultBox].
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
I think tzuk has made it clear that there is only one place that is appropriate for SbieCtrl_Xxx settings. Use the GUI for your configuration instead of hand editing the INI to prevent errors like this.
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Kay wrote:
But the Problem really is there, and you can check it easy with my installation script and my configuration above. Of course its really important that there is NO configuration file at C:\Windows.


Kay, I tried your approach, and fortunately I could reproduce the problem. But it turns out it happened to me because the "template" that I created Sandboxie.ini was not UNICODE. So Sandboxie was just ignoring it.

Please check the Event Viewer and check the System log for any warnings from Sandboxie regarding the configuration file. And keep in my mind the requirement for UNICODE encoding.

Kay wrote:
No I just updated the configuration file. The right place for the SbieCtrl_Xxx is only UserSettings_Xxx ? I want that any new user uses the SbieCtrl_Xxx Settings at the [DefaultBox].


Then put them in [UserSettings_Default]. I've addressed this point, and several others that you might find interesting, in a new page advising how to do a corporate install. Please take a look.

http://www.sandboxie.com/index.php?CorporateInstallation
View user's profileSend private message
Kay


Joined: 12 Dec 2008
Posts: 12
Location: Switzerland
Reply with quote
thank you for youre help tzuk Smile

I will try it mondays, but I think that was the problem.

The page about the Corporate Installation is also very nice, thanks for that.

I never saw that tutorial, under which point of youre website did I find the link for this tutorial?

once again, thank you for youre help Smile
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
It's a new page so you could not have found it earlier. You can now find links to this new page in the Download page and the Commercial Licensing page.
View user's profileSend private message
EditAdminOnly Problem (detailed with config files)
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 2 of 2  

Use the RSS feed to watch this topic for replies
  
  
 Reply to topic  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 208,305,123 times since June 2004