SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRights

Utilities designed for use with Sandboxie
Post Reply
Iggiz
Posts: 8
Joined: Sun Feb 12, 2017 1:09 pm

SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRights

Post by Iggiz » Fri Feb 17, 2017 5:46 pm

Often installers ask for admin rights but they actually don't need them to install.
Mostly, this happens because programs try to install themselves into the program files folder by default.

Here's the compiled version of SboxieUtil and its features:
SboxieUtil Features

1. Install programs without Administrator Rights (no UAC prompts, no SBIE2217 errors).
-Tested with Inno Setup and NSIS installers, but it should work with other installers/programs too.

2. Clipboard access control for sandboxed programs (ReadWrite, Read, Write, Block, BlockAll).

New Feature:

3. Start/Run restrictions for programs installed inside of a sandbox.

Note: It will not show any error messages when a process start was blocked but you can view the debug output with Dbgview from microsoft. (Apply a filter named SboxieUtil)

Each feature supports exceptions "ProcessExceptions=" "SandboxExceptions=", configurable via SboxieUtil.ini
More features will be added later, please check the readme file for the full feature list and installation instructions.
https://drive.google.com/file/d/0B5by5H ... 9GbEk/view

Download (Source code included):
https://drive.google.com/drive/folders/ ... EJXaHVvV1U
Last edited by Barb@Invincea on Mon Oct 09, 2017 7:29 pm, edited 3 times in total.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 1705
Joined: Mon Nov 07, 2016 9:10 pm

Re: Run programs that require admin rights without admin rig

Post by Barb@Invincea » Fri Feb 17, 2017 6:47 pm

Hello Iggiz,

I am moving this thread to the Contributed Utilities & Templates section.

Regards,
Barb.-

Iggiz
Posts: 8
Joined: Sun Feb 12, 2017 1:09 pm

Re: Run programs that require admin rights without admin rig

Post by Iggiz » Sat Feb 18, 2017 9:26 pm

Sorry Barb, I will pay more attention next time and post it in the right section.


Some updates regarding inno setup installers, I wrote a dll that can be injected via sandboxie to be able to run inno setup installers without admin rights too.
Not sure if I'm allowed to upload it here as attachment, but if there is interest then I'll find a place to upload it.

If someone likes to build a dll on their own, you'll need to hook ShellExecute/ShellExecuteEx and look for the "runas" verb, replace it with "open".
Additionally the installer will also call "CheckTokenMembership", you'll have to hook that too and return true.

Iggiz
Posts: 8
Joined: Sun Feb 12, 2017 1:09 pm

Re: SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRi

Post by Iggiz » Wed Mar 01, 2017 6:51 pm

I just uploaded a beta version with a newly added feature, follow the link in the first post and open the beta folder to find it.

New Feature:

Start/Run restrictions for programs installed inside of a sandbox.



I know you're actually not supposed to install programs inside of a sandbox, but it can be useful in some cases so I ended up adding this feature.
If you install a program normally (outside of a sandbox) then please stick to the Start/Run restrictions offered by sandboxie itself.


Note: It will not show any error messages when a process start was blocked but you can view the debug output with Dbgview from microsoft. (Apply a filter named SboxieUtil)

Iggiz
Posts: 8
Joined: Sun Feb 12, 2017 1:09 pm

Re: SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRights

Post by Iggiz » Sun Oct 08, 2017 1:07 am

Update:

I simplified everything and replaced the registry tweaks with a new RunAsInvoker= key inside SboxieUtil.ini



@Barb (Or any other moderator):

Could you modify the first post and remove all the lines starting from "Often installers ask ..." up to "Here's the compiled version..." ?
Thanks

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 1705
Joined: Mon Nov 07, 2016 9:10 pm

Re: SboxieUtil - Sandboxie enhancement dll - Run w/o AdminRights

Post by Barb@Invincea » Mon Oct 09, 2017 7:30 pm

Iggiz,

Per our PM conversation, this is done.

Please feel free to PM me directly if you need any other changes made to the original topic.

Regards,
Barb.-

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest