search

sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.88k stars 1.54k forks source link

EXCEL.EXE (6040): SBIE2205 Service not implemented: NetUseAdd + Outlook locks issue #1276

Open mauriceatkinson opened 3 years ago

mauriceatkinson commented 3 years ago

When I downloaded a csv into the sandbox and start excel I receive this error message from Sandboxie v0.9.7e. The error message is "EXCEL.EXE (6040): SBIE2205 Service not implemented: NetUseAdd" and I have the option to dismiss the error in the displayed window.

Excel displays the downloaded csv file without any issues.

DavidXanatos commented 3 years ago

i wonder why excel wahts to create a new user on your system surely seams strange

mauriceatkinson commented 3 years ago

happy to provide any details you need to resolve this, just let me know

DavidXanatos commented 3 years ago

I'm not sure if that needs resolving sandboxie blocked a call to NetUseAdd in purpose, as you don't want sandboxed excel to create new user accounts on your system.

diversenok commented 3 years ago

@DavidXanatos, you are talking about NetUserAdd while the messages says NetUseAdd

DavidXanatos commented 3 years ago

oh right

mauriceatkinson commented 3 years ago

just to update you, when excel opens a sandbox file and the sandboxie error message is displayed, it is not possible to edit or access the file within excel. Everytime I attempt to move around the spreadsheet there is a windows "ding" There is not open prompts but it isnt possible to do anything other than close excel. However it is not possible to close excel normally and this has to be done via task manager.

isaak654 commented 3 years ago

I was able to reproduce the Service not implemented: NetUseAdd dialog, it appears every time I access to a mapped network drive. This is due to the BlockNetworkFiles=y setting on your sandbox.

Since it's a default setting for any sandbox, you can turn it off with BlockNetworkFiles=n in order to not see the NetUseAdd dialog anymore.

Anyway, I think that BlockNetworkFiles setting needs to be improved internally because the block it puts caused a certain slowdown on my Windows Explorer session (while attempting to access to the mapped drive for plain curiosity).

mauriceatkinson commented 3 years ago

Great find. I changed BlockNetworkFiles=n and the error message no longer appears. However the excel issue does which to be honest is more criticial. Although excel opens the file as before you cannot move or click on anything within the spreadsheet. The only way to close down excel is either to terminate the excel process in the sandbox or using windows task manager. This problem still occurs in v0.9.8 attached is the trace log of the excel issue that may shed some light on it. excel hang.txt b

isaak654 commented 3 years ago

You could try something like: OpenIpcPath=*\BaseNamedObjects\MSSPHTB_* OpenIpcPath=*\BaseNamedObjects\OfficeSharedLocks_* OpenIpcPath=*\BaseNamedObjects\WMS Notif Engine* OpenIpcPath=*\BaseNamedObjects\MAPI-*

If they're not enough, it would help if you could attach a shorter log with the exact time interval where you're having the issue.

DavidXanatos commented 3 years ago

I can't reproduce this issue, on my test VM with an up to date office excel seams to work just fine

mauriceatkinson commented 3 years ago

This is the version I am using and Microsoft states this is the latest version. Microsoft® Excel® for Microsoft 365 MSO (Version 2109 Build 16.0.14430.20292) 64-bit

mauriceatkinson commented 3 years ago

excuse my ignorance but in what config file do the openipcpath statements go?

isaak654 commented 3 years ago

excuse my ignorance but in what config file do the openipcpath statements go?

Assuming you're on the main Sandboxie Plus window and you've closed any running program in the sandbox: 1) Go to Options menu -> Edit ini file -> confirm yes 2) Add those lines below [DefaultBox] or below your sandbox name you actually use 3) Save the ini file and close it

The main configuration file is stored by default on C:\Windows\Sandboxie.ini

mauriceatkinson commented 3 years ago

After making the changes into the ini file things look much better as I can now open/edit a downloaded CSV into the sandbox with Excel without any issues. Thanks very much

DavidXanatos commented 3 years ago

Could you please test with only some of the lines which one is making the difference, would be good to know exactly whats teh cause than it should be added to the global templates

mauriceatkinson commented 3 years ago

This is a weird one. I started testing and excel worked everytime, I removed all the new ini entries and it still worked. I updated to new Sandboxie version - it worked without any ini entries. I reverted back to 0.9.7b using the installed ini file and it still worked. I will keep using it and see if the problem reappears.

DavidXanatos commented 3 years ago

ok cool in that case i can close the issue

isaak654 commented 3 years ago

@DavidXanatos Two of the lines I posted above are already included in [Template_Office_Outlook] as part of an Outlook pst locks fix

https://github.com/sandboxie-plus/Sandboxie/blob/9fcfc4054e0c525f1188ab2380cf1ce686bc314d/Sandboxie/install/Templates.ini#L1070-L1071

You may consider to move them in a global template, since only a few users enable manually that template.

The alternative is to add the following Scan lines to the [Template_Office_Outlook], since they allow to apply automatically and silently the Outlook template for anyone who has Outlook, in order to prevent the pst locks:

Tmpl.Scan=s
Tmpl.ScanKey=\REGISTRY\MACHINE\SOFTWARE\Clients\Mail\Microsoft Outlook
isaak654 commented 2 years ago

@APMichael I'm looking for suggestions about https://github.com/sandboxie-plus/Sandboxie/issues/1276#issuecomment-950306242 and https://github.com/sandboxie-plus/Sandboxie/issues/1276#issuecomment-951823853, it looks like the Outlook locks issue is still happening in random Sandboxie versions (see here).

Even if this issue seems related to an Excel hang, the same author is also running Outlook: https://github.com/sandboxie-plus/Sandboxie/issues/1260

APMichael commented 2 years ago

Since the fix, I haven't had any problems with Office, i.e. Excel, Word and PowerPoint. Unfortunately, I have never used Outlook with Sandboxie and therefore cannot make any recommendations.

isaak654 commented 2 years ago

I have just performed a test with v1.1.3. With this specific Sandboxie version, Outlook doesn't allow to skip the initial sign-in popups because of #2006... even worse when you apply the Office_Outlook template, because it totally prevents Outlook from being loaded for the same issue.

These particular regressions are not new: OpenKeyPath_faulty

There would be another bad news for certain Sandboxie users... in order to downgrade to a version without the issue like 1.0.22, you'll need to clean the sandbox content first, otherwise this could continue indefinitely.

In light of this, I am even more confused about my initial request to set [Template_Office_Outlook] as default when Outlook is detected... what it could be done is to tweak it a little bit in a separate PR, because it contains some unnecessary lines.

EDIT: For some unknown reason, I am no longer able to test it... suddenly Outlook presents a white screen when opening it.