Hi Alan, sorry I didnt answer earlier but I havent logged in here this past few days. Yes, Office is too complicated to be installed sandboxed but it should run well under Sandboxies supervision when its installed in your host. I suggest you stay away from C2R, the reason being is that the chances that Microsoft Office 2019 would run smoother under Sandboxie than C2R are much greater.
Bo
Office already is sandboxed by default. Why re-create the wheel. It started with Office 2k10. Microsoft struts Office 2010 security | Computerworld Microsoft also offers "Windows Sandboxed" in Windows 10 Pro and Enterprise for 19H1. Microsoft announces Windows Sandbox, a desktop environment for running applications in isolation
UNDERSTANDING THE MICROSOFT OFFICE2016 PROTECTED-VIEW SANDBOX https://conference.hitb.org/hitbsecconf2017ams/materials/D2T4%20-%20Koh%20Yong%20Chuan%20-%20Understanding%20the%20Microsoft%20Ofice%202016%20Protected%20View%20Sandbox.pdf
Tutorial: Custom install or change Microsoft Office with Office Deployment Tool | Tutorials
You can skip parts One, Two and Three in tutorial, I have already created a configuration script for you which only installs PowerPoint, OneNote and Publisher (Office 2019 Pro Plus EN-US 32 bit):
PHP Code:<Configuration ID="5193a5c2-0a17-438c-b8f9-2039930bd224">
<Add OfficeClientEdition="32" Channel="Broad" ForceUpgrade="TRUE">
<Product ID="ProPlus2019Retail">
<Language ID="en-us" />
<Language ID="MatchPreviousMSI" />
<ExcludeApp ID="Access" />
<ExcludeApp ID="Excel" />
<ExcludeApp ID="Groove" />
<ExcludeApp ID="Lync" />
<ExcludeApp ID="OneDrive" />
<ExcludeApp ID="Outlook" />
<ExcludeApp ID="Word" />
</Product>
</Add>
<Property Name="SharedComputerLicensing" Value="0" />
<Property Name="PinIconsToTaskbar" Value="FALSE" />
<Property Name="SCLCacheOverride" Value="0" />
<Updates Enabled="TRUE" />
<RemoveMSI>
<IgnoreProduct ID="InfoPath" />
<IgnoreProduct ID="InfoPathR" />
<IgnoreProduct ID="PrjPro" />
<IgnoreProduct ID="PrjStd" />
<IgnoreProduct ID="SPD" />
<IgnoreProduct ID="VisPro" />
<IgnoreProduct ID="VisStd" />
</RemoveMSI>
<Display Level="Full" AcceptEULA="TRUE" />
<Logging Level="Off" />
</Configuration>
Save the script as Configuration.xml
Start from tutorial Part Four. When running ODT setup (step 4.8), use the above script. It will install your selected Office 2019 applications, or in case Office 2019 Pro Plus is already installed, remove all except the selected three applications.
That's it.
Kari
Sandboxie was introduced as a commercial product in 2004, 15 years later, and the Windows sandbox is not a finished product yet. In all honesty, the wheel (the sandbox) its actually being re-created by MS, not by Sandboxie. I being using SBIE since 2009, at that time, it was already a mature program. Very stable. In all the years I have been using Sandboxie, I never seen any malware escape the sandbox, and more than that, there has been no malware in the wild that escapes the sandbox. None whatsoever. That makes it a good reason to use SBIE when you can, even with programs that have their own sandbox. And people who used SBIE for a while, try to do that because they know it works. They seen the results of using SBIE.
By the way, the Windows sandbox is extremely limited when you compare it to Sandboxie. There is a lot you can do with Sandboxie that you wont be able to do with the Widows sandbox, that in my opinion, makes it not fair to either product to be compared with each other. Not fair to the Windows sandbox, because at least MS is now using sandboing techniques (App container) to protect Windows. Something they could it started doing many years ago. And now, Windows will have a limited sandbox that can be used for a few tasks. Its a beginning.
And not fair to Sandboxie because SBIE is not only mature, but you can use it to sandbox every file and program you run on a daily basis. Thats how I use SBIE. Every file i run in my computer, runs sandboxed "automatically" every time they run during their lifetime in my pc. Thats how I protect myself. And you have many settings that you can use to relax or tighten the sandbox. You can restrict it as much as setting it up where only 1 exe is allowed to run. Everything else gets blocked (good or bad). Internet? You can set it up where no program is allowed to run. Thats very restricted. And you can maximize isolation by running every program you run in their own dedicated sandbox, so, programs are not only isolated from the system but from each other as well. This allows the user to setup each sandbox according to what they going to do with it or the program or programs they going to run in it.
Sandboxie has many settings and uses. I could spend here hours writing on things you can do with SBIE. But like I said, it wouldn't be a fair comparison.
Bo
Sorry to tell you this. With today’s advanced malware, it can get around a sandbox. Sandboxes are not for everyday use, with the thinking that they will save you from your bad habits.
If you make the mistake of downloading malware and run it out of the sandbox, you will get infected. Sandboxie is not going to save you if you do. But if you know what you are doing, which is something you learn, and use Sandboxie to run every file you run, you avoid infections, and thats what I done during the past 10 years. And its easy. By the way, I don't do safe browsing, I browse wherever I want to go and come out clean every day. I can do that because I learned security and use Sandboxie and NoScript. The one danger I have to be extremely careful with is running files out of the sandbox or installing programs. Installing programs is something I rarely do, and I almost never run files out of the sandbox.
Look at the picture below, you ll only see one security program in the list of programs, Sandboxie. No scanner. Instead of running scans or taking care of the scanners, I have a lot of extra time to do the things I really like doing while using the internet. Also, the computer uses a lot lesser amount of resources by not using scanners or anything else other than SBIE, learning security not only helps you maintain your computer intact but it gives you those benefits. Its worth it to learn security. Ten years ago when I started doing it, I went the sandbox way, I could it gone another way but thats how I went. And I dont regret it.
How I take care of my security is not for everyone but the track record of Sandboxie against malware is impeccable, and the way I use Sandboxie and my own record avoiding getting infected proves (not to you, but to me, the Sandboxie user) that it works.
Bo
Last edited by bo elam; 22 Jan 2019 at 04:08.
Quote
