Run untrusted software in unprivileged containers with Sandboxie-Plus

Caveats:

  1. This provides better performance than a typical virtual machine. But there's some performance loss, so it's not ideal for resource-intensive games.
  2. This is only for using programs while isolating them from the internet. If you're an advanced user, feel free to tweak Sandboxie-Plus to be usable while letting the sandbox connect to the internet by blocking read-access to sensitive directories. Or use a virtual machine / non-piracy route, 2 instead.
  3. Sandboxie-Plus is only available for Windows. So, if you're a MacOS or Linux user, it won't work unless you set up a Windows VM beforehand and install it on there.
  4. Sandboxie-Plus has premium features and unless you support them, you won't get permanent access to them (only for 5 minutes). You can try to compile the code yourself from their GitHub repo. But if you can't, you're out of luck.

Sandboxie-Plus Logo


Getting Started

Download Sandboxie-Plus

Download and install the latest version of the software from here.
(Pick the version simillar to this one: Sandboxie-Plus-[Architecture]-[Version Number].exe)

Image

Install Sandboxie-Plus

Install it like any other program. The steps have been listed anyways in case you have issues.

  1. Select your language and click on OK.

Image

  1. Click on I accept the agreement and then Next.

Image

  1. Select Install Sandboxie-Plus on this computer if you want it to be a standard application, otherwise select the Extract all files to a directory for portable use option for portable use.

Image

  1. You can browse for a new installation folder. Otherwise, click Next.

Image

  1. Give the app a name if you want to. Otherwise, click on Next.

Image

  1. You can check the Create a desktop shortcut checkbox to create a desktop shortcut. The Download latest Templates.ini and translations option's not necessary unless you can't understand English. Do not check the Install (or Update) ImDisk 3.0 driver (for RamDisk and Encrypted Sandboxes) checkbox unless you have a premium certificate as both of those are paid features. Then, click on Next.

Image

  1. Check the options if you want to. Otherwise, click on Install.

Image

  1. Wait for a bit until it finishes installing.

Image

  1. You can check the Start Sandboxie-Plus UI checkbox. Regardless of if you do or do not, click on Finish.

Image

Setting up Sandboxie-Plus

After opening the app, you'll notice that a new Introduction window has opened. You can use it to configure the app to your liking. Follow the steps below.

  1. Select whether you're using it for personal or commercial use. Be sure to double check the selection as it persists on the later installations as well.

Image

  1. If you have the premium certificate, fill in your personal details and rest of the serial number. Regardless of if you do or do not, click on Next.

Image

  1. If you're an advanced user, select the first option and if you're not, select the second one. Use the third option if you want a more retro feeling while using the app. After that, select Bright Mode if you like light mode and Dark Mode if you like dark mode.

Image

  1. Check the first option if you want the app to automatically start with Windows, the second one if you want to create a sandbox from the Windows context menu, the third one if you want a desktop icon of a browser using Sandboxie and the forth one if you want only apps with admin access to your computer to be able to change the configuration of Sandboxie-Plus. Then click on Next.

Image

  1. Pick the first option if you want stable updates and the second one if you want experimental updates. Then click on Next.

Image

  1. Click on Finish.

Image


Create a sandbox

  1. Click on Sandbox (located at the top-left side of the screen)Create New Box.

Image

  1. Give the box a name and select the box type (if you don't have access to the premium features, select Standard Sandbox). Be sure to check the Configure advanced options checkbox.

Image

  1. In the next page, the default selections are good enough. If you're an advanced user, feel free to change the settings to your liking. If not, click on Next.

Image

  1. In the next page, change the Network Acess selection to Block network/internet by denying access to Network devices, check Make applications think they are running elevated and Drop rights from Administrators and Power User groups. Then, click on Next.

Image

Blocking internet connections is important in this particular setup, because the app you run is allowed to read (not modify) many of the files accessible to your current user, and could potentially upload them to the internet. If you really need internet for a program, consider configuring the sandbox with less privileges, for example by blocking read-access to sensitive directories.

'Make applications think they are running elevated' allows you to install any program without giving administrator (full system control) permissions.

'Drop rights from Administrators and Power User groups' is specially important if your current Windows user is an Administrator account. For extra isolation, you could create a separate Windows user account, a Standard User without admin permissions, but it's not required.

  1. Click on Next.

Image

  1. Click on Finish

Image

Confirm settings are correct

The Status column shows if you correctly blocked admin permissions and internet connections:

Image


Install your app inside the sandbox

The app will not ask you for admin permissions, because it has fake admin permissions. It will be installed in a parallel file system inside the sandbox.

Create a sandbox from the Windows context menu

Right click on the file you want a sandbox for. Then click on Run Sandboxed.

Windows 10:

Image

Windows 11:

Image

If you're using something to only have the old context menu on Windows 11, it won't work.

Explore the Windows File Explorer from inside the sandbox

  1. Right click on the sandbox that you want to run. Then, go to RunStandard ApplicationsWindows Explorer

Image

  1. Check the Don't show this message again. checkbox and click on OK.

Image


Run your sandboxed app or game

Run it from the start menu

Right click on the sandbox that you want to run. Then, hover over RunStandard Applications. After that, click on Run from Start Menu

Image

Create a desktop shortcut

  1. While the sandboxed app is open, right-click on the main process and select Create Shortcut.

Image

  1. Save it like a normal shortcut.

Image

Take files out of the sandbox

  1. Right click over the sandbox that you want the files out of. Then, click on Recover Files.

Image

  1. Select the file that you want to take out. If there are multiple files that you want to take out, select the folder. After that, click on Recover.

Image


Other interesting settings


Block read-access to cookies directories using closedfilepath

It's important when letting the sandbox connect to the internet. It's meant for advanced users only. So, if you consider yourself one, follow the steps.

  1. Right click on the sandbox. Then click on Sandbox Options.

Image

  1. Click on Edit ini Section. Then click on Edit ini. After that, add these lines for the following browsers:

For Chromium based browsers: ClosedFilePath=%LocalAppData%\*\*\User Data\Default\*

Image

For Firefox based browsers: ClosedFilePath=%USERPROFILE%\AppData\Roaming\*\Profiles\*

Image

  1. Click on Ok.

You can use 'Windows File Manager' inside the sandbox to verify that you can't access those directories that contain cookies or other sensitive files.


Total access for selected directories using openfilepath

You can let the the sandboxed app directly edit files in some specific directories.

  1. Right click on the sandbox. Then click on Sandbox Options.

Image

  1. Click on Edit ini Section. Then click on Edit ini. After that, add a line simillar to OpenFilePath=[Directory Path] which will look something like OpenFilePath=C:\Downloads\.

Image

  1. Click on OK.

Credits

The previous owner - Unknown (not a username)
New / Current owner - Clara

Fuck AI

(With <3)


Go back to the top

Edit Report
Pub: 16 Aug 2023 18:32 UTC
Edit: 29 Apr 2025 01:37 UTC