|Trust No Program|
. . . [InstallBox] Enabled=y Enabled=y,Administrators
The first example is the typical form of Enabled, a required part of any sandbox section in the configuration file. It indicates that the sandbox InstallBox can be used for sandboxing.
The second example similarly defines the sandbox InstallBox while also restricting its use to the Administrators user accounts group. Any user account or group that is recognized by the local Windows system can be specified. Multiple Enabled lines may be specified if the list of user accounts does not fit in one line.
A sandbox that has been restricted to specific users is considered hidden to all other user accounts. Those other user accounts will not see the sandbox listed in Sandboxie Control, and any Force Process or Force Folder settings will not apply to those user accounts.
Attempts to explicitly start a program in a sandbox that does not have an associated Enabled=y setting will fail.