Windows 10: Is this possible to create permanent sandbox?

Discus and support Is this possible to create permanent sandbox? in Windows 10 Ask Insider to solve the problem; I want to create a sandbox-like desktop and use some programs that may be harmful while keeping my main desktop safe. But I dont want it to delete... Discussion in 'Windows 10 Ask Insider' started by /u/yastifkan, Feb 23, 2021.

  1. Is this possible to create permanent sandbox?


    I want to create a sandbox-like desktop and use some programs that may be harmful while keeping my main desktop safe. But I dont want it to delete every time i close it, programs must be permanent. Just like having a second pc. Is this possible?

    submitted by /u/yastifkan
    [link] [comments]

    :)
     
    /u/yastifkan, Feb 23, 2021
    #1
  2. Naresh_K Win User

    windows sandbox Not working

    Hi,



    Thank you for writing to Microsoft Community Forums.



    There is a possibility that the feature is corrupted or not set up properly. I would advise you to disable Windows Sandbox first and then enable it. Please follow the steps mentioned below:

    1. Open Control Panel.
    2. Then click on all Control Panel Items.
    3. Then click on Programs and features.
    4. Then on the left hand side, click on Turn Windows features on or off.
    5. Then uncheck the option: Windows Sandbox.
    6. Then restart your computer.
    7. After restart, please enable it and check if the sandbox is working.


    Also make sure that you meet all the requirements for Windows Sandbox.

    Regards,
     
    Naresh_K, Feb 23, 2021
    #2
  3. QUESTION: MS Word 2013 - Possible to run PORTABLE + SANDBOXED?

    Dear Members:

    FYI: I have annotated #Bo.Elam notes to improve visual acuity to facilitate my study and implementation.
    I hope these may proves helpful to anyone else interested in these excellent recommendations and instructions from Bo.

    Positively,~ Alan

    P.S. Please forgive excess vertical spacing between paragraphs... does NOT provide WYSWYG formatting control.



    QUESTION: MS Word 2013 - Possible to run PORTABLE + SANDBOXED?

    Post - » 27 Jun 2018 at 03:23 PM

    • Would it be possible to provide explicit instructions as a reference...
    • How to create a dedicated sandbox for Libre

    Post - bo.elam » 27 Jun 2018 at 09:59 PM [annotated by AB]

    • To create a new sandbox
    • go to Sandboxie control>Sandbox>Create new sandbox >
    • in the screen that opens... option to name the new sandbox as you wish.
    • Since this sandbox is going to be your dedicated Libre Office sandbox, name it Libre.
    • You also have the option to either copy settings from existing sandboxes or not to >
    • choose None.


    • The sandbox you created comes with default settings.
    • In a default settings sandbox, all programs that attempt to start and run in the sandbox can run... can have access to the internet... have access to all files and folders in your system.


    • Next step is to restrict what programs are allowed to do in the sandbox.
    • ... new sandbox restrict it as tight as possible without losing any usability... I try to achieve a balance between usability and security and always get it done.
    • So, in the end, I am always able to run programs in the sandbox same as if I was not using Sandboxie... If you set a sandbox correctly, the interaction between sandboxed programs and the non sandboxed environment should be flawless.

    Libre is:

    • very easy to setup to run properly in the sandboxed environment.
    • With a few changes to default settings you can set a very secure sandbox for Libre without losing usability.


    1. Make soffice.bin a Forced program.

    • ... any Office file that runs in the system, will run sandboxed automatically in the Libre Office.
    • It makes sandboxing automatic
    • No thinking required to sandbox files.


    • go to Sandbox settings in your Libre Office sandbox >
    • Sandbox settings>Program Start>Forced programs >
    • click Add program >
    • ... navigate to soffice.bin
    • ... select it and add it >
    • or you can write it in the block there for that purpose.


    2. In this step, you restrict programs that can run.

    • Once you add programs in this restriction tab, this will be the only programs allowed to run in the Libre sandbox.
    • Any other program that attempts to run, it will be blocked.

    For Calc, Writer, Impress, etc, to run in the sandbox, allow:

    • soffice.bin
    • soffice.exe
    • dllhost.exe


    • You really dont have to allow dllhost but for a more seamless interaction between SBIE and the non sandboxed system I recommend you allow it to run.

    So, go here to add the [3] exes I wrote above:

    • Sandbox settings>Restrictions>Start/Run access
    • click Add program
    • select [3] exes


    3. Internet access.
    Since you don't need Office files to have access to the internet and Libre doesnt require it to work properly, for security

    • disallow all programs from having access to the internet.

    • Sandbox settings>Restrictions>Internet access
    • click Block all programs
    • Once you do this, there is no phoning home.


    4. Drop rights. This setting is helpful if you run your system as an Administrator. I do, so I use it.

    • This setting strips Administrator rights from programs running in this sandbox.
    • So, if something malicious gets to run, it can't install anything in the sandboxed environment.
    • Sandbox settings>Restrictions>Drop rights
    • click this option.

    5. Another important setting you want to implement are the ones that help you protect your sensitive files and folders from being stolen.

    • Remember, by default, sandboxed programs can read all files and programs that are in the system.
    • So, you want to block sandboxed programs from accessing your sensitive files and folders.
    • We already disallowed all programs:
      • that run in the Libre sandbox from having internet access
      • restricted to a few the programs allowed to run
      • so even if your personal files and folders are accessed, the chances an infected Office file steals your files and phone home are close to none.
    • But even so, this is a great setting that keeps your files from getting stolen.
      • This setting is more important in sandboxes where you allow access to the internet, like your browsers sandboxes.

    To restrict access to files and folders, go here:


    Sandbox settings>Resource access>File access>Blocked access

    • click Add for navigating to select the files and folders you like to block sandboxed programs from having access/read.


    There are other setting related to access but you can start with the one above.


    6. Set the sandbox to delete on closing sandboxed programs.

    • Sandbox settings>Delete>Delete Invocation
    • tick Automatically delete contents of the sandbox


    7. Saving files you create or Edit in the sandbox.

    • For convenience, you want to be able to save files.
    • ... when you delete contents of the sandbox, the only changes that will survive deletion made by sandboxed programs of the sandbox are the ones you allow.
    • Like for example, an edit you do to an Excel file...
      • if you would like to save that change, you save it.
      • If you dont want to save the change, you dont save it when you get the SBIE prompt to do it after you close sandboxed programs.


    • In my case, I only save Office files to the desktop. So I add Desktop in the tab below.
      • Sandboxie will save files only to the folders you add in Quick recovery:
      • Sandbox settings>Recovery>Quick recovery



    Thank you again, #bo.elam !
     
    ab1kenobee, Feb 23, 2021
    #3
  4. Naresh_K Win User

    Is this possible to create permanent sandbox?

    Microsoft sandbox stoped working

    Hi,



    Thank you for writing to Microsoft Community Forums.



    Please be informed that our developer team is aware of the issues with Sandbox and is working on resolving it. We do not have an ETA as of now, however I encourage you to send a feedback to our developer team via
    Feedback hub. As a suggestion you can try disabling and enabling
    the sandbox to check if that works. Please follow the steps mentioned below:



    1. Open Control Panel.
    2. Then click on all Control Panel Items.
    3. Then click on Programs and features.
    4. Then on the left hand side, click on Turn Windows features on or off.
    5. Then uncheck the option: Windows Sandbox.
    6. Then restart your computer.
    7. After restart, please enable it and check if the sandbox is working.


    Also make sure that you meet all the requirements for Windows Sandbox.
    Your patience and understanding will be appreciated in this matter.



    Regards
     
    Naresh_K, Feb 23, 2021
    #4
Thema:

Is this possible to create permanent sandbox?

Loading...
  1. Is this possible to create permanent sandbox? - Similar Threads - possible create permanent

  2. Is it possible to create a language pack?

    in Windows 10 Ask Insider
    Is it possible to create a language pack?: I know it sounds stupid, but I would like to write in Minecraft Enchanting Table (Standard Galactic Alphabet) or even my custom language, but without using a custom font (like with Japanese, Arabic, Greek or Chinese). Is it possible? submitted by /u/ThatOneAlphaPigeon...
  3. Is it possible to restart windows sandbox?

    in Windows 10 Ask Insider
    Is it possible to restart windows sandbox?: I'm trying to install a software inside windows sandbox but the software requires a restart inorder to work. Now windows sandbox gives me this error 0x80072746 https://imgur.com/gallery/g4wKY3k -I have virtualization enabled in my bios settings -I have hyper v turned on -I...
  4. Is it possible to permanently uninstall WIFI or create a password to access WIFI on the...

    in Windows 10 Ask Insider
    Is it possible to permanently uninstall WIFI or create a password to access WIFI on the...: Is it possible to permanently uninstall WIFI or create a password to access WIFI on the laptop itself? curious if this is possible. thanks. submitted by /u/serialserialserial99 [link] [comments]...
  5. Possible permanent fix for language bug?

    in Windows 10 Customization
    Possible permanent fix for language bug?: So I have this bug where LAlt+LShift regularly changes between "german germany" and "english united states" even though my only installed language-pack is german... I've found that it's possible to fix this issue temporarily by installing the US english language pack and then...
  6. Is it possible to somehow run Windows 7 in Windows Sandbox?

    in Windows 10 Ask Insider
    Is it possible to somehow run Windows 7 in Windows Sandbox?: submitted by /u/sprite-1 [link] [comments] https://www.reddit.com/r/Windows10/comments/dq2msl/is_it_possible_to_somehow_run_windows_7_in/
  7. Create Windows Sandbox configuration files with Sandbox Configuration Manager

    in Windows 10 News
    Create Windows Sandbox configuration files with Sandbox Configuration Manager: Sandbox Configuration Manager is a free program for Microsoft's Windows 10 operating system that helps users of the system create sandbox configuration files. Windows Sandbox is a new feature of Windows 10 version 1903 that uses Windows Containers to provide the sandbox...
  8. Create Sandbox in Windows 10 using Sandbox Configuration Manager

    in Windows 10 News
    Create Sandbox in Windows 10 using Sandbox Configuration Manager: [ATTACH] [ATTACH]Windows Sandbox is a lightweight desktop environment which makes sure that you can run applications in isolation. The arrangement makes sure the app doesn’t get access to core Windows files and other system files. That said, it’s not straightforward to [...]...
  9. How to create custom configuration environment for Windows Sandbox

    in Windows 10 News
    How to create custom configuration environment for Windows Sandbox: [ATTACH] [ATTACH]Windows Sandbox is a great tool for testing out some applications and utilities in an isolated environment. But many times, a user looks out to create a custom environment to test out various software and services. This was one of [...] This post How to...
  10. Is it possible to create a hidden account?

    in User Accounts and Family Safety
    Is it possible to create a hidden account?: Hello friends of the forum. I need to create an admin account in our home computer, but it needs to be a hidden account. Is it possible? I have access to everything in the computer, and I also had replaced the utilman.exe with the command line, to use it on the system...