Hi there-

I have been trying Sandboxie and bought the license, but I seem to keep on tripping over myself when I attempt to use it in a certain way. My primary goal is to have Sandboxie used in a specific Windows 7 Standard Account, call it the Kids Account. When someone logs into that account, programs like Internet Explorer and Chrome must use Sandboxie. I also would like Windows Explorer to run either in Sandboxie or not at all, the goal being to protect the computer's harddrive and NAS from accidental deletions. But when the Administrator account logs in, all those programs would run as normal.

I tried poking around and testing some things, but it seemed that if I forced a program to run in Sandboxie, it would run in Sandboxie regardless of the Account.

Frankly I would be pretty happy to run the entire Account Sandboxed.

Finally, any other suggestions that people have for using Sandboxie on a computer you share with your kids, where you want your account to have its normal powers, but restrict the damage your children can do if they click on the wrong link or hit the delete key at an inopportune time.

Thanks,

Unfortunatley such an action would cause the whole account to run inside Sandboxie which is very problematic for a number of reasons. Many programs that have drivers on your computer will cease to function under that mode of usage. IIRC disabling explorer.exe is akin to shutting down a core system component - ie. can't be done.

Sandboxie is designed for the purpose of running protected apps alongside non protected ones, which gives a lot of flexibility and doesn't require reboots to exit/initialize protections. Its not designed however to deal with users who fight its protection and physically abuse the settings. The closest thing to what you want to accomplish is to force the browser, disable file recovery and password protect the settings.

Easier still, you should have a conversation with your kids (if they are old enough) and educate them on how to use the program and why good security practices are important.

Thanks for your reply D1G1T@L.

The kids are 5 and 7, and not malicious at all. Just naive and happy go lucky.

In terms of specifics, is there a way to force Chrome or another program to run in sandboxie in one account, but not in another? I know I can manually select to not run in sandboxie every time I start up a forced program, but was looking for something a bit more automatic.

Also, would there be a way to have most user initiated 'casual' requests for opening Windows Explorer (for example, click on a folder) open in Sandboxie, without causing the more drastic problems you cited of forcing the whole program there?

Or if thats not possible, a way at least to prevent access to the network and my NAS.

Any suggestions would be greatly appreciated. I really do like the software.

Thanks,

Bump. Is there a way to force a program to run in Sandboxie for one user, but not for another?

Thanks,

Here's just the thing you're looking for:
http://www.sandboxie.com/index.php?UserAccountsSettings



If you're trying to block NAS access thorugh a locally mounted network share, you could enable some form of authentication both locally and on your LAN.