Trust No Program
This topic is locked: you cannot edit posts or make replies.
DropMyRights
dogdog


Joined: 19 May 2008
Posts: 300
Reply with quote
A small thing but worth mentioning.

My shortcuts are "prefixed" by DropMyRights. These short cuts worked perfectly well in conjunction with Sandboxie.

Having installed v 3.32 these shortcuts no longer work (all OK in v 3.30). If I remove DropMyRights from the shortcut target then no problem.

Any thoughts as to what is causing this result??
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Can you quote an example shortcut that you modified with DropMyRights? That way I could try to reproduce the problem.

_________________
tzuk
View user's profileSend private message
DropMyRights
dogdog


Joined: 19 May 2008
Posts: 300
Reply with quote
I am using Vista Ultimate and Sandboxie 3.32.

The same happens with all my shortcuts in conjunction with Sandboxie so the following is just one example.

I have a shortcut for Skype; the target is:
C:\Users\alanperelman\MSDN\DropMyRights\DropMyRights.exe "C:\Program Files\Skype\Phone\Skype.exe"

If I rightclick on shortcut and start sandboxed, the Sandboxie process starts (I get red spots in Sandboxie's system tray icon) but nothing happens and the system tray icon returns to all yellow.

If I remove DropMyRights and change target to:
"C:\Program Files\Skype\Phone\Skype.exe"

Then if I rightclick on shortcut and start sandboxed, all works fine and Skype starts up sandboxed.

Over to you. Thanks for your help.
View user's profileSend private message
Ruhe


Joined: 03 Jul 2008
Posts: 803
Location: Germany
Reply with quote
Is there a reason to use DropMyRights on Vista with enabled UAC?
View user's profileSend private message
dogdog


Joined: 19 May 2008
Posts: 300
Reply with quote
I only use Admin Account. Hence addition of DropMyRights helps to some degree. May not need with Sandboxie but I also open some programs unsandboxed (when DMR does help) and it easier to have just one shortcut.
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
OK dogdog thanks for your elaboration on this, I will check it out at some point and tell you what I find out.
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
Now that Sandboxie includes a DropMyRights-like feature, perhaps this is no longer an issue.
View user's profileSend private message
Ruhe


Joined: 03 Jul 2008
Posts: 803
Location: Germany
Reply with quote
Does is make any sense or is there a benefit of enabling this SBIE feature on Vista with active UAC and a "normal" Vista user?
View user's profileSend private message
How to tell if it is working
soccerfan


Joined: 25 Sep 2007
Posts: 421
Reply with quote
I have shied away from programs such as surun, makemeadmin,
runasadmin etc because of all the hassle it apparently entailed.

Now, with sandboxie, running safer is a mouse-click away!
To me, this is truly a big step forward in sbie development Very Happy
Thanks tzuk.

Now for my 'problem'. I enabled DropAdminRights in order to try it out.
I was able to download/upload files, view pdf/doc attachments etc (all as expected).

But I was also able to install a program (orbit downloader) in the 'program files' folder.
I thought that, as a limited user, I would not have the privilege of installing software Confused

And my question:
Are any messages (error/warning) displayed if I perform actions that are not allowed.
If so, what things can I try to see if DropAdminRights is working the way it should?
Many thanks.

EDIT: I'm on XP home SP1 (with sbie 3.33.02)

_________________
soccerfan
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
I believe Users can still install software that doesn't write to system locations they don't have access to. Also, SB's DMR feature drops rights to POWER Users, a bit different than Users I think. My knowledge on different user rights stop there unfortunately.

For an example, open a sandboxed Windows Explorer or command prompt and try to delete something from your Windows\System32 directory. Your attempt should fail.
View user's profileSend private message
MitchE323


Joined: 02 Nov 2006
Posts: 2268
Reply with quote
I think it drops it to somewhere below Power Users, judging from the wording on the Drop Rights tab.
Quote:
However, if you are using an administrative or power user account, Sandboxie can disable more security rights, similar to the effect of the DropMyRights utility.
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15003
Reply with quote
This really isn't a ground breaking feature (soccerfan).

wraithdu, the point is to drop your associations with the Administrator and Power Users group, turning an Administrator account into a normal user account.

And unfortunately I am having a really hard time getting it to work on Windows Vista.
View user's profileSend private message
wraithdu


Joined: 29 Jun 2007
Posts: 1410
Reply with quote
I did an AutoIt version of DMR a while back to address some shortcomings, and basically followed the source code of DMR itself. I've not had any problem getting it to work in Vista. I'm assuming then that your trouble is getting it to work in the context of Sandboxie?
View user's profileSend private message
soccerfan


Joined: 25 Sep 2007
Posts: 421
Reply with quote
tzuk wrote:
This really isn't a ground breaking feature (soccerfan).

Maybe not groundbreaking but so much easier to use (for me at least) Smile

tzuk wrote:
wraithdu, the point is to drop your associations with the Administrator and Power Users group, turning an Administrator account into a normal user account.

What actions does the normal user account disallow (compared to an admin or power user account)?
View user's profileSend private message
dogdog


Joined: 19 May 2008
Posts: 300
Reply with quote
tzuk wrote:
Now that Sandboxie includes a DropMyRights-like feature, perhaps this is no longer an issue.


Is this a feature within v 3.32??

What is this feature (or could you let me have a link to a description).

Many thanks

PS: Very pleased with Sandboxie. I think that support responsiveness is particularly impressive.
View user's profileSend private message
DropMyRights
You cannot post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 6  

Use the RSS feed to watch this topic for replies
  
  
 This topic is locked: you cannot edit posts or make replies.  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 208,232,942 times since June 2004