How can I use WindowGrid while Privacy Mode is enabled?

M

mingya

Member
Environment:

  • Windows 11 Pro 25H2
  • Sandboxie-Plus 1.18.1 / core 5.72.10
  • WindowGrid running outside the sandbox
I am trying to use WindowGrid with a sandbox that has Privacy Mode enabled.

My Global Settings contain:
UsePrivacyMode=y
Click to expand...
Individual sandbox contains the recommended WindowGrid settings:
OpenIpcPath=*\BaseNamedObjects*\WindowGrid*
OpenWinClass=*WindowGridOverlay*
Click to expand...
However, WindowGrid cannot interact with or position the sandboxed window while the box inherits UsePrivacyMode=y.

If I add UsePrivacyMode=n to the individual sandbox, WindowGrid immediately works.

I also tested removing and adding the two WindowGrid lines again, reloading the configuration, terminating the sandbox, exiting and restarting Sandboxie-Plus, and restarting WindowGrid. The result remained the same.

Why can’t I enable Privacy Mode and use WindowGrid with the two recommended exceptions?

Does Privacy Mode require an additional IPC, GUI, file, registry, or Normal... access rule for WindowGrid?

I would like to keep Privacy Mode enabled and permit only the specific resources WindowGrid requires, rather than disabling Privacy Mode for each sandbox. How can I achieve that?
 
offhub said:
There's already a template for this, have you used it?

Template=WindowGrid
Click to expand...
That code is on the default ini, it's not working, that was why I have to use that 2 line in individual instance.
That template works on instances with "UsePrivacyMode=n"
 
If WindowGrid is not located in "Program Files," you must make that location accessible using "NormalFilePath"; otherwise, WindowGrid will not be able to inject the necessary modules into applications running in the sandbox.

INI: 
NormalFilePath=X:\Path-To-WindowGrid\*

OR

INI: 
NormalFilePath=X:\Path-To-WindowGrid\WindowGrid??.dll
 
offhub said:
If WindowGrid is not located in "Program Files," you must make that location accessible using "NormalFilePath"; otherwise, WindowGrid will not be able to inject the necessary modules into applications running in the sandbox.

INI: 
NormalFilePath=X:\Path-To-WindowGrid\*

OR

INI: 
NormalFilePath=X:\Path-To-WindowGrid\WindowGrid??.dll
Click to expand...
You must not read the entire post above.
WindowsGrid works fine as long as "UsePrivacyMode=n" is in each instance.

My question, as this post title was named, how to use it without?
 
Ok, I think this is getting confusing.

First off, the way the text was understood on the screenshot above, that if "UsePrivacyMode=y" then WindowGrid should work as long as it it inside either one of that directory in the HKLM registry.

However, that is not the case. It has to be disabled "UsePrivacyMode=n" for it to work.

Unless, are you telling me I misunderstood the text in the screenshot above?
 
The standard Template=WindowGrid is sufficient when Privacy Mode is disabled. With Privacy Mode enabled, however, the template is insufficient. A possible cause is that Privacy Mode’s documented implicit read access mentions C:\Program Files\* but not C:\Program Files (x86)\*, where WindowGrid may be installed.
 
You must log in or register to reply here.
Back
Top