Sandboxie & Vista feedback request...

[bjm_]

Good day to all,
I would appreciate feedback from Sandboxie users and MVP's (if possible). I installed Sandboxie and used it untill I realized it toggled Protected Mode to OFF. I posted on the Sandboxie forum my concerns about Protected Mode:OFF. I questioned why Sandboxie is not compatible with Vista defaults. I questioned why and how Sandboxie is able to toggle Vista defaults. I received several very ascertive and defensive comments from the site admin. ie: I don't need Protected Mode > Protected Mode offers only a very limited Sandbox for IE7 >Sandboxie will protect IE7, my programs, my apps. and my HDD/Computer better than Protected Mode or anything else Vista/Microsoft has to offer. The application does run flawlessly and after hours of use I had no tracks, no temps, no reg. entries, nothing got to my HDD. Everything was dumped when I closed the program. So, in theory any malware was also dumped. The Author of Sandboxie and several reviews claim Sandboxie as the best first line of security defense. Defense against Zero Day attacks, Hacker Wednesday etc. etc. Nothing gets to my HDD, so no worries. I hope this post is not too long and your still with me. My concerns are Protected Mode:OFF and I don't know what else Sandboxie toggles away from Vista defaults. I would appreciate all feedback... Is Sandboxie all it's touted to be. Respectfully, bjm_

 

[MilesAhead]

I've been using Sandboxie for about a year now in both 32 bit XP and Vista. I'm not sure about interactions with IE since I stopped using IE altogether after a BHO hosed my system(before I started using Sandboxie.) I set the Sandboxie service to Manual just so that I only run it when surfing. I stop the service before burning DVDs or whatnot. Some people use it for test installs. To me the biggest drawback is there will be no 64 bit support due to changes in Vista 64 bit(as noted on Sandboxie web site.)

The new machines are coming with more than 4 GB ram installed and 64 bit Vista. Unfortunately this means the main use of Sandboxie on new hardware will be if you add 32 bit XP to the PC as multi-boot.

imho Sandboxie takes a simpler approach by redirecting stuff that tries to write to disk instead of trying to firgure out what software is "good" and what is "bad". It's a shame
it won't do Vista 64 bit though.

Seems like MS isn't going to change its mind afa kernel modification and without that Sandboxie just won't work.

 

[johngalt]

The other thing is that of course M$ wants to push their own product - Windows Steady State - but that is not supported on 64bit OSs yet either.

 

[bjm_]

to MilesAhead
thank you for your reply...I also set Sandboxie service to "manual". Since I have never had an adverse event with IE... I alternate betwn IE and FF. If your using FF with a Standard User Account have you noticed with FF not Sandboxed the option to check for FF updates is grayed out. With FF Sandboxed the option is not grayed out as if I was in my Administrator Account. I have found apps that require Run As Admin. will run Sandboxed... I'm still of the opinion that Sandboxie elevates user priviledge and was written for pre-Vista OS when the default priviledge was Admin. and not Standard as with Vista. Thanks again for your feedback... bjm_

 

[MilesAhead]

I don't see that the protection one might get from account control would be superior to that provided by Sandboxie, that uses a device driver, a service, and kernel modificaiton!! So I have to admit I run it on an admin account with UAC disabled. On systems such as Linux and NT 4 Server, that are really designed as multi-user, I surf with a normal account. On "regular" Windows, to me, it's more aggravation than protection. As alternative, I keep my system backed up with recent system snapshots.


So I guess that's a long-winded way of saying I don't know what Sandboxie acts like when run from a "normal" account.