Trust No Program

Corporate Installation

Sandboxie Corporate Installation

Sandboxie supports automated installation that may be useful to push Sandboxie to a large number of workstations in a corporate setting.

The four steps of the automated installation are:

These steps are described in the sections below. Once Sandboxie is installed, the task of upgrading workstations to a newer version of Sandboxie can also be automated. See the section below:




Set Configuration

Prior to running the installation on a workstation, place a copy of Sandboxie Ini configuration file in the Windows directory. This pre-prepared configuration file should be created on a workstation at some point during your evaluation of Sandboxie.

Important: The Sandboxie.ini file should be saved in Unicode encoding. If you are manually creating the file from scratch in Notepad, then make sure to use "Save As" so you can specify Unicode in the Encoding field.

Some points to consider when preparing the configuration file:

Please see the Sample Sandboxie.ini File below for more ideas.

Sample command to copy Sandboxie.ini:

    copy \\FileServer\SandboxieSetup\Sandboxie.ini C:\Windows




Install Sandboxie

To run the Sandboxie installation program silently, use this command:

    "\\FileServer\SandboxieSetup\SandboxieInstall.exe" /lang=xxxx /install /S /D=C:\Program Files\Sandboxie

The /lang=xxxx parameter is optional. It specifies which language translation to install:

    /lang=1033 for English.  This is the default setting.
    /lang=1052 for Albanian
    /lang=2052 for Chinese (Simplified)
    /lang=1028 for Chinese (Traditional)
    /lang=1029 for Czech
    /lang=1030 for Danish
    /lang=1043 for Dutch
    /lang=1061 for Estonian
    /lang=1035 for Finnish
    /lang=1036 for French
    /lang=1031 for German
    /lang=1040 for Italian
    /lang=1041 for Japanese
    /lang=1042 for Korean
    /lang=1045 for Polish
    /lang=1046 for Portuguese (Brasil)
    /lang=1049 for Russian
    /lang=1034 for Spanish
    /lang=1055 for Turkish




Activate License

(The following applies to Sandboxie version 3.48 and later.)

Apply your Product Key into the installed copy of Sandboxie:

    "C:\Program Files\Sandboxie\License.exe" silent activate PRODUCTKEY

This command validate the Product Key on the Sandboxie web site and activates the license. If you wish to make sure the activation was successful, use this command instead:

    start "" /wait "C:\Program Files\Sandboxie\License.exe" silent activate PRODUCTKEY

This alternate form will make sure the built-in ERRORLEVEL variable receives the value zero (0) on successful activation or the value one (1) on failure.

Special considerations for customers who place a large commercial order:

If you have a Product Key for an order of at least 100 licenses, the activation key will not include an expiration date. You may additionally request an activation key that is not tied to a particular computer, and which can be activated without connecting to the Sandboxie web site.

To acquire your special activation key, please follow the instructions in the Offline Activation page. Simply enter a system code 0000000000000000 (16 zeroes) to request the special activation key. Use the following command to apply the activation key into Sandboxie:

   "C:\Program Files\Sandboxie\License.exe" silent activate ACTIVATIONKEY

This alternate form does not connect to the Sandboxie web site, and should not fail, assuming that the activation key was copied correctly. Where applicable, this command can be used instead of the silent activate PRODUCTKEY form, shown earlier.

Note: The activation key is always tied to a particular version of Sandboxie.

See Also: The ActivationPrompt setting.




Start Sandboxie Control

The Sandboxie Control program is responsible for automatically deleting the sandbox, among other tasks, so you are advised to run it in any logon session where Sandboxie may be used.

An installation of Sandboxie does not configure Sandboxie Control to auto-start during logon. However, a typical installation launches Sandboxie Control when it finishes, and in turn Sandboxie Control configures itself to auto-start during logon, by adding itself to the "Run" key for the current user.

However, the silent installation does not start Sandboxie Control when it finishes.

The recommended approach to this in a corporate installation is as follows.

    reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    /v SbieCtrl /t REG_SZ /d "C:\Program Files\Sandboxie\SbieCtrl.exe" /f
    (Note: This is a single-line command which was broken into two lines to enhance clarity.)
    [UserSettings_Default]
    SbieCtrl_EnableLogonStart=N

Please see the sample below for a full example.




Sample Sandboxie.ini File

    [GlobalSettings]
    ForceDisableAdminOnly=yes
    EditAdminOnly=yes
    MonitorAdminOnly=yes
    FileRootPath=C:\TEMP\Sandbox\%USER%\%SANDBOX%
    ActivationPrompt=n
    [DefaultBox]
    Enabled=y
    ConfigLevel=6
    AutoDelete=y
    AutoRecover=n
    ForceProcess=iexplore.exe
    OpenFilePath=%Favorites%
    OpenFilePath=%Desktop%\Download
    LeaderProcess=iexplore.exe
    BorderColor=#00FFFF
    [UserSettings_Default]
    SbieCtrl_ShowWelcome=N
    SbieCtrl_HideWindowNotify=N
    SbieCtrl_ReloadConfNotify=N
    SbieCtrl_AutoApplySettings=Y
    SbieCtrl_SettingChangeNotify=N
    SbieCtrl_TerminateWarn=N
    SbieCtrl_ExplorerWarn=N
    SbieCtrl_EditConfNotify=N
    SbieCtrl_ProcSettingsNotify=N
    SbieCtrl_ExplorerNotify=N
    SbieCtrl_ShortcutNotify=N
    SbieCtrl_TerminateNotify=N
    SbieCtrl_EnableLogonStart=N
    SbieCtrl_EnableAutoStart=Y
    SbieCtrl_AddDesktopIcon=N
    SbieCtrl_AddQuickLaunchIcon=N
    SbieCtrl_AddContextMenu=N
    SbieCtrl_AddSendToMenu=N
    SbieCtrl_NextUpdateCheck=1555555555
    SbieCtrl_UpdateCheckNotify=N
    SbieCtrl_AutoRunSoftCompat=N

Sample Automated Batch File

    rem
    rem   If Sandboxie is already installed on this workstation, do nothing
    rem
    if exist C:\Windows\Sandboxie.ini exit /b
    rem
    rem   Set Configuration
    rem
    copy "\\FileServer\SandboxieSetup\Sandboxie.ini" C:\Windows
    rem
    rem   Install Sandboxie
    rem
    "\\FileServer\SandboxieSetup\SandboxieInstall.exe" /install /S /D=C:\Program Files\Sandboxie
    rem
    rem   Register Sandboxie
    rem
    "C:\Program Files\Sandboxie\License.exe" activate XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
    rem
    rem   Start Sandboxie Control
    rem
    set ZZKEY=HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    set ZZEXE="C:\Program Files\Sandboxie\SbieCtrl.exe"
    c:\windows\system32\reg add %ZZKEY% /v SbieCtrl /t REG_SZ /d %ZZEXE% /f
    %ZZEXE%




Upgrade Sandboxie

In this scenario, Sandboxie already installed, registered and configured in the corporate workstations, as described above. A newer version of Sandboxie can be pushed to the workstations by simply running the Sandboxie installation program in upgrade mode. Use this command:

    "\\FileServer\SandboxieSetup\SandboxieInstall.exe" /upgrade /S

Note that an upgrade installation does not require the /lang or /D switches that were necessary for initial installation.

Two notes regarding Sandboxie Control:

If you do not have the updated 25-digit activation key, please email support@sandboxie.com with you original license key for verification.

Sandboxie is Copyright © 2004-2016 by Sandboxie Holdings, LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 756,533,787 times since June 2004