Sandboxie 5.30 (and 5.28) breaks Windows 10 Home 'File Explorer'

When using Windows 10 Home, version 1809, Build 17763.475, I have a problem with Windows File Explorer: When I am logged into a non-admin user account on this computer, I can not access any of the shares (shared with Everyone) in the admin user account of another Windows 10 computer on this LAN which is updated to the same version and build as this computer. This problem does not occur if I access a Windows 7 computer on this same LAN or if I access this Windows 10 computer from that Windows 7 computer. If I am logged into the admin user account on this computer, the problem does not occur. Then I can access the shares in all the user accounts of all the Windows 10 computers. Also this problem does not occur if I first uninstall Sandboxie from this Windows 10 computer. I first noticed this problem after the May 3, 2019 Microsoft update described in KB4495667, so it could be related to that update as well as to Sandboxie.

Parents
  • [GlobalSettings]
    
    Template=Pdf995
    Template=WindowsRasMan
    Template=7zipShellEx
    Template=WindowsLive
    Template=OfficeLicensing
    
    [DefaultBox]
    
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    Enabled=y
    CopyLimitKb=354306
    
    [UserSettings_086401B8]
    
    SbieCtrl_UserName=boss
    SbieCtrl_BoxExpandedView=DefaultBox
    SbieCtrl_ShowWelcome=n
    SbieCtrl_NextUpdateCheck=1557497824
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_WindowCoords=302,157,1237,632
    SbieCtrl_ActiveView=40021
    SbieCtrl_ExplorerNotify=n
    
    [UserSettings_089401BE]
    
    SbieCtrl_UserName=hoss
    SbieCtrl_ShowWelcome=n
    SbieCtrl_NextUpdateCheck=1557497670
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_WindowCoords=200,150,1237,632
    SbieCtrl_ActiveView=40021
    SbieCtrl_ExplorerNotify=n
    SbieCtrl_BoxExpandedView=DefaultBox
    
    [UserSettings_081601A4]
    
    SbieCtrl_UserName=bill
    SbieCtrl_ShowWelcome=n
    SbieCtrl_NextUpdateCheck=1532211104
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_WindowCoords=200,150,1237,632
    SbieCtrl_ActiveView=40021
    
    [GlobalSettings]
    
    Template=7zipShellEx
    Template=WindowsRasMan
    Template=WindowsLive
    Template=Pdf995
    Template=OfficeLicensing
    
    [DefaultBox]
    
    ConfigLevel=7
    AutoRecover=y
    BlockNetworkFiles=y
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
    RecoverFolder=%Personal%
    RecoverFolder=%Favorites%
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,ttl
    Enabled=y
    
    [UserSettings_086401B8]
    
    SbieCtrl_UserName=boss
    SbieCtrl_BoxExpandedView=DefaultBox
    SbieCtrl_NextUpdateCheck=1557505379
    SbieCtrl_UpdateCheckNotify=n
    SbieCtrl_ShowWelcome=n
    SbieCtrl_WindowCoords=200,150,1237,632
    SbieCtrl_ActiveView=40021
    
    [UserSettings_089401BE]
    
    SbieCtrl_UserName=hoss
    SbieCtrl_ShowWelcome=n
    SbieCtrl_NextUpdateCheck=1557506691
    SbieCtrl_UpdateCheckNotify=n
    

    1-Sandboxie version: 5.30, Windows version: 10 x64 bit 1809

    2- Affected application: Windows File Explorer

    3- Antivirus: Windows Defender (latest definitions)

    4- Steps to reproduce issue: Log 2 Windows 10 computers onto the LAN. Using one of the computers, open Windows File Explorer to view the user accounts of the other computer on the LAN. From the Admin user account (BOSS), both user accounts (which contain shares) will be shown on the other computer, but when viewed from the Non-Admin user account (HOSS), only the Non-Admin user account will be shown on the other computer. If I uninstall Sandboxie from one computer and use either user account to view the other computer, both user accounts will be shown on the other computer.

    5-I have uninstalled Sandboxie v5.30 and its configuration file, then reinstalled it, but doing so made no difference. Attached are the 2 configuration files, the one before and the one after the reinstallation. The user account "BILL" had been removed from the computer long ago, but its presence was still noted in the first config file. Please note that I believe that Microsoft's recent update (KB4495667) may have something to do with this problem because I did not notice the problem occurring before that update.

    6- No error messages are displayed.

  • Hi Lee,

    Are you opening the Windows Explorer instances in the Sandbox, or in the host? 

    And, can you confirm if unchecking "Block network files" makes a difference?

    Right-click on your Sandbox --> Sandbox settings --> Restrictions --> Network Files --> un-check "block network files and folders...." 

    Thanks!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • I have been opening Windows File Explorer in the Host, not in the Sandbox. After unchecking "Block network files" in the Sandbox settings, I found that doing so did not make a difference. Also opening Windows File Explorer in the Sandbox after unchecking "Block network files" did not resolve the problem.

  • Hi Lee,

    Please provide the exact sharing steps you followed, so I can try to set this up on my test environment. 

    Are you sharing using a workgroup, or...? I need specific info. 

    Thanks!

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • I did not create the shares inside a Workgroup. To create the shares in both my Admin and Non-Admin user accounts, I used these steps:

    1- Opened Windows File Explorer in the Host, not in the Sandbox

    2- Right-clicked on a folder or sub-folder in "This PC"

    3- Left-clicked on "Properties"

    4- Left-clicked on "Sharing" and noticed that it showed "Not shared"  Also under "Password Protection", it says: "People must have a user account and password for this computer to access shared folders."

    5- Left-clicked on "Share"

    5- Left-clicked on the down-arrow in the dialog box

    6- Left-clicked on "Everyone"

    7- Left clicked on "Share"

    8- Rebooted the computer

Reply
  • I did not create the shares inside a Workgroup. To create the shares in both my Admin and Non-Admin user accounts, I used these steps:

    1- Opened Windows File Explorer in the Host, not in the Sandbox

    2- Right-clicked on a folder or sub-folder in "This PC"

    3- Left-clicked on "Properties"

    4- Left-clicked on "Sharing" and noticed that it showed "Not shared"  Also under "Password Protection", it says: "People must have a user account and password for this computer to access shared folders."

    5- Left-clicked on "Share"

    5- Left-clicked on the down-arrow in the dialog box

    6- Left-clicked on "Everyone"

    7- Left clicked on "Share"

    8- Rebooted the computer

Children
  • Hi Lee,

    I am not able to reproduce this issue. I tested with 2 different computers with Win 10 x64 + Sbie 5.30 installed.

    On computer a:

    Shared a a folder via an admin account
    Shared a folder via the non admin account

    Logging to each account (on the same computer) shows the shared folders, and I can see all the users listed (admin and regular). 

    On computer b:
    Using a non-admin account
    I accessed the network, entered the password and was able to see the shared folders from both admin and non admin accounts, as well as the account names under Users. 

    If you have any other steps I can follow, please detail them and I'll give it another try. 

    Regards,

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.