|Trust No Program|
DropAdminRights is a sandbox setting in Sandboxie Ini. It specifies whether Sandboxie will strip Administrator rights from programs running in this sandbox.
. . . [DefaultBox] DropAdminRights=y
The setting in this page causes Sandboxie to strip administrative rights from programs running in this sandbox.
Specifically, the security credentials used to start the sandboxed program will not include membership in the Administrators and Power Users groups.
Note that this has little effect if you are already running under a non-Administrator user account.