|Trust No Program|
ReadKeyPath is a sandbox setting in Sandboxie Ini. It specifies a path patterns, for which Sandboxie will not apply sandboxing for registry keys, and will not allow writing.
Program Name Prefix may be specified.
. . . [DefaultBox] ReadKeyPath=HKEY_LOCAL_MACHINE\SOFTWARE\Policies
This example forces the Policies key, and everything below it, to be readable, but not writable (or deletable) by sandboxed programs.
Note: ReadKeyPath is a restricted form of OpenKeyPath. As with OpenKeyPath, any already-existing sandboxed contents for the specified file or folder locations, are ignored.