Question regarding the "Sandboxie" program

[Nzyme]

I would like to know whether the following functionality is available in Sandboxie:
 
Currently, when a program is installed outside of a sandbox and then if a new sandbox is created or if an existing sandbox is opened, we see the installed program in the sandbox too (that is, changes in the actual system are carried into any sandbox). I would like to know if it is possible to restrict changes from the "actual" system to the "sandbox"?
 
Currently, the opposite functionality exists, that is any change in a sandbox is not carried to the actual system but would like to have it the other way around.
 
Thanks!

[Curt]

http://www.sandboxie...e15b74d2cba4a4829695

[Nzyme]

@Curt:

http://www.sandboxie...c7ad5c70c487015dbd39

[Curt]

http://www.sandboxie...c7ad5c70c487015dbd39

-Nzyme (January 19, 2012, 09:57 PM)

---------
But maybe you should give an example, in order to better visualize what you are asking for.

[MerleOne]

I would like to know whether the following functionality is available in Sandboxie:
 
Currently, when a program is installed outside of a sandbox and then if a new sandbox is created or if an existing sandbox is opened, we see the installed program in the sandbox too (that is, changes in the actual system are carried into any sandbox). I would like to know if it is possible to restrict changes from the "actual" system to the "sandbox"?
 
Currently, the opposite functionality exists, that is any change in a sandbox is not carried to the actual system but would like to have it the other way around.
 
Thanks!

-Nzyme (January 19, 2012, 07:29 PM)

Not sure it is possible the way it works.  If you create a file C:\foo.txt, then you will access it in every created sandbox, then if you delete it in regular mode, it will also be deleted for all apps run from sandboxes.  If not, you would have to store this, and a huge amount of data.

You may get something close to what you want by using something like shadowdefender + sandboxie but it depends on what you want to perform I guess.

[Innuendo]

Sandboxie has always been designed to keep things in & not keep things out. Usually if one creates or installs something outside of a sandbox one is usually comfortable and confident in those changes and wishes those to be propagated system-wide.

[40hz]

Sandboxie has always been designed to keep things in & not keep things out. Usually if one creates or installs something outside of a sandbox one is usually comfortable and confident in those changes and wishes those to be propagated system-wide.

-Innuendo (January 20, 2012, 01:08 PM)

Exactly.

In order to fence out the 'real' environment from the sandboxed environment, you'd need a higher level environment and supervisor which would then contain both. If you want to do that, you're better off skipping the sandbox concept (which is a bit of a kludge) and switch over to using virtual machines. That would give you complete control over each instance.
 

[nkormanik]

Can someone suggest a "virtual machine" program which would be a step up from Sandboxie?

I use Sandboxie all the time, and it seems to work fine.  But if there's something better, bring it on.

Nicholas

[Carol Haynes]

VirtualBox allows you to install any OS/apps and keep them totally isolated from your main system.
https://www.virtualbox.org/

VMWare Player
http://www.vmware.com/products/player/

Microsoft VirtualPC
XPMODE: http://www.microsoft.../windows/virtual-pc/ (not sure you can use this on WIndows 7 without the Pro version)
for XP and Vista see: http://www.microsoft...virtual-pc-2007.aspx

There is also Parallels (but I don't think there is a free version):
http://www.parallels...ownload/workstation/