Sandboxie failed to install Office 2021

RisingYoung-Learn commented 2 years ago

What happened?

I am in Shandboxie AppCompartment mode, the installation of office 2021 fails.

Download link

https://retail.winandoffice.com/en/ms-office-2021-pro-plus/

To Reproduce

1.Drag Office\Setup64.exe into the Sandboxie sandbox. 2.Select Default, select "Run as UAC administrator".

Expected behavior

successfully installed.

What is your Windows edition and version?

Windows Server 2016 Standard [Version 1607 (OS Build 14393.5006)]

In which Windows account you have this problem?

I use the built-in Administrator account.

Please mention any installed security software

Windows Defender

What version of Sandboxie are you running?

Sandboxie-Classic-x64-v5.55.21.exe

Is it a regression?

No response

List of affected browsers

No response

In which sandbox type you have this problem?

All sandbox types (I tried them all).

Where is the program located?

I tried to install it only inside a sandbox, but I wasn't able to achieve it.

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

[GlobalSettings]

Template=WindowsRasMan
Template=WindowsLive
Template=Windows10CoreUI
Template=OfficeLicensing
FileRootPath=C:\Sandbox\%USER%\%SANDBOX%

[DefaultBox]

ConfigLevel=9
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
BorderColor=#00FFFF,ttl
Enabled=y
CopyLimitKb=99999999
NeverDelete=n
ExposeBoxedSystem=y
UnrestrictedToken=y
MsiInstallerExemptions=y
UnrestrictedSCM=y
KeepTokenIntegrity=y
BlockNetParam=n
CopyLimitSilent=y
RpcMgmtSetComTimeout=n
RunServicesAsSystem=y
RunRpcssAsSystem=y
NoSecurityIsolation=y

[UserSettings_4BC00582]

SbieCtrl_UserName=administrator
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_WindowCoords=515,476,1053,615
SbieCtrl_ActiveView=40021
SbieCtrl_AutoApplySettings=n
SbieCtrl_TerminateNotify=y
SbieCtrl_TerminateWarn=y
SbieCtrl_ExplorerNotify=n
SbieCtrl_ExplorerWarn=y
SbieCtrl_EditConfNotify=y
SbieCtrl_ReloadConfNotify=y
SbieCtrl_HideWindowNotify=n
SbieCtrl_ProcSettingsNotify=y
SbieCtrl_SettingChangeNotify=y
SbieCtrl_ShortcutNotify=y
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_ShouldDeleteNotify=n
SbieCtrl_ShowWelcome=y
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_BoxExpandedView=DefaultBox,Ensight,QQ,UG,UG12,WeChat,WPS
SbieCtrl_AutoStartAgent=SandMan.exe

[UserSettings_176C02C3]

SbieCtrl_UserName=jhuser1
SbieCtrl_NextUpdateCheck=1648189734
SbieCtrl_WindowCoords=47,203,950,543
SbieCtrl_ActiveView=40021
SbieCtrl_BoxExpandedView=Ensight,QQ

DavidXanatos commented 2 years ago

office installation not working yet is unfortunately a known issue, I'm working on it but its not an easy fix unfortunately

RisingYoung-Learn commented 2 years ago

David, thanks for your reply. I am very interested in AppCompartment mode right now. Strong security is useless to me. The way I use sandboxie is installation the application in sandbox to make it virtualized. I think this is a common case to the AppCompartment mode. Could you provide help to installation and running of Office 2010 and Visual Studio 2015 in sandboxie? I will donate this project in github. Thanks.

DavidXanatos commented 2 years ago

On the bottom of this page https://sandboxie-plus.com/plus-features/ you can find a roadmap of whats to come, I'm afraid installing MS office will have to be on the bottom of that list, as the other things have more use in general. MS office in a box is lets say the holy grail of installer compatibility if we can get that to install we can install everything. Also open office installs fine :D

I'll look into VS 2015 that might be doable with reasonable afford.

RisingYoung-Learn commented 2 years ago

Thank you so much for your support for VS2015, I will donate to this and send the voucher to your xanatosdavid@gmail.com.

DaneXtream commented 2 years ago

I've managed to install MS Office 2007 (MSI setup installer) and it works fine until now.

isaak654 commented 2 years ago

Office 2021 is not comparable with 2007, so it's a different matter.

blap commented 2 years ago

EDITED

I've managed to install MS Office Pro Plus 2019 in sandboxie-plus 64bits 1.3.5 portable and it works fine until now.

To run office programs you need to put this in INI:

StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service

And to save files add "OpenPipePath" too with the extensions you would like to use.

My INI file (edited):

Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OfficeLicensing
Template=OfficeClickToRun
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=9
AllowNetworkAccess=<BlockNetAccess>,n
BoxNameTitle=n
FakeAdminRights=y
MsiInstallerExemptions=y
CopyLimitKb=-1
NotifyProcessAccessDenied=y
OpenWinClass=#
RpcMgmtSetComTimeout=n
OpenSamEndpoint=y
OpenLsaEndpoint=y
OpenProtectedStorage=y
ForceProcess=POWERPNT.EXE
ForceProcess=WINWORD.EXE
ForceProcess=EXCEL.EXE
ForceProcess=OfficeClickToRun.exe
StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
NotifyDirectDiskAccess=y
LingerProcess=OfficeClickToRun.exe
OpenPipePath=WINWORD.EXE,*.doc
OpenPipePath=EXCEL.EXE,*.xls
OpenPipePath=POWERPNT.EXE,*.ppt
OpenPipePath=WINWORD.EXE,*.docx
OpenPipePath=EXCEL.EXE,*.xlsx
OpenPipePath=POWERPNT.EXE,*.pptx
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedFilePath=<BlockNetDevices>,InternetAccessDevices

paradoxicallist commented 2 years ago

@blap

You got a missing E letter (EXE) in this line: OpenPipePath=EXCEL.EX,*.xlsx

BTW, there's no MSI setup installer for Office 2019 afaik.

blap commented 2 years ago

@blap

You got a missing E letter (EXE) in this line: OpenPipePath=EXCEL.EX,*.xlsx

BTW, there's no MSI setup installer for Office 2019 afaik.

Thanks. You can download official images from microsoft.

isaak654 commented 2 years ago

I've managed to install MS Office 2019 (MSI setup installer) and it works fine until now.

To run office programs you need to put this in INI:

StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service

And to save files add "OpenPipePath" too.

My INI file (edited): ...

@blap Has this been tested for Office 2021 (installed only inside a sandbox, but not outside)?

blap commented 2 years ago

I've managed to install MS Office 2019 (MSI setup installer) and it works fine until now. To run office programs you need to put this in INI: StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service And to save files add "OpenPipePath" too. My INI file (edited): ...

@blap Has this been tested for Office 2021 (installed only inside a sandbox, but not outside)?

I can not test it now... 2021 version is getting my 2019 version instaled in yellow box. And delete content give me errors... I will make more tests.

error

blap commented 2 years ago

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box. To run office programs you need to put this in INI: StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service Remember to use "OpenPipePath" too with the extensions you would like to use. Example:

OpenPipePath=WINWORD.EXE,*.doc
OpenPipePath=EXCEL.EXE,*.xls
OpenPipePath=POWERPNT.EXE,*.ppt
OpenPipePath=WINWORD.EXE,*.docx
OpenPipePath=EXCEL.EXE,*.xlsx
OpenPipePath=POWERPNT.EXE,*.pptx

Same INI from 2019:

Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OfficeLicensing
Template=OfficeClickToRun
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=9
AllowNetworkAccess=<BlockNetAccess>,n
BoxNameTitle=n
FakeAdminRights=y
MsiInstallerExemptions=y
CopyLimitKb=-1
NotifyProcessAccessDenied=y
OpenWinClass=#
RpcMgmtSetComTimeout=n
OpenSamEndpoint=y
OpenLsaEndpoint=y
OpenProtectedStorage=y
ForceProcess=POWERPNT.EXE
ForceProcess=WINWORD.EXE
ForceProcess=EXCEL.EXE
ForceProcess=OfficeClickToRun.exe
StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
NotifyDirectDiskAccess=y
LingerProcess=OfficeClickToRun.exe
OpenPipePath=WINWORD.EXE,*.doc
OpenPipePath=EXCEL.EXE,*.xls
OpenPipePath=POWERPNT.EXE,*.ppt
OpenPipePath=WINWORD.EXE,*.docx
OpenPipePath=EXCEL.EXE,*.xlsx
OpenPipePath=POWERPNT.EXE,*.pptx

paradoxicallist commented 2 years ago

@blap You say:

I've managed to install MS Office Pro Plus 2019 in sandboxie-plus 64bits 1.3.5 portable and it works fine until now.

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box.

Could you say what exact Office setup files you are using please? I mean exact images filenames as they show up in Microsoft?

And above all, some steps how to install Office inside a sandbox cause I can't manage to do it yet. LOL

isaak654 commented 2 years ago

@blap Has this been tested for Office 2021 (installed only inside a sandbox, but not outside)?

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box. To run office programs you need to put this in INI: StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service Remember to use "OpenPipePath" too with the extensions you would like to use. Example: ...

ForceProcess settings in this config make me think there is still an Office version installed outside the sandbox. Have you checked that there are no Office traces in the real system outside the sandbox?

At this stage, I would prefer to have clear steps than risking to fail again my Office 2021 installation inside the box for a misunderstanding.

blap commented 2 years ago

@blap You say:

I've managed to install MS Office Pro Plus 2019 in sandboxie-plus 64bits 1.3.5 portable and it works fine until now.

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box.

Could you say what exact Office setup files you are using please? I mean exact images filenames as they show up in Microsoft?

And above all, some steps how to install Office inside a sandbox cause I can't manage to do it yet. LOL

Give me your link and I will test it and make a tutorial. Or can I use this link? https://officecdn.microsoft.com/db/492350F6-3A01-4F97-B9C0-C7C6DDF67D60/media/en-US/ProPlus2021Retail.img

blap commented 2 years ago

@blap Has this been tested for Office 2021 (installed only inside a sandbox, but not outside)?

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box. To run office programs you need to put this in INI: StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service Remember to use "OpenPipePath" too with the extensions you would like to use. Example: ...

ForceProcess settings in this config make me think there is still an Office version installed outside the sandbox. Have you checked that there are no Office traces in the real system outside the sandbox?

At this stage, I would prefer to have clear steps than risking to fail again my Office 2021 installation inside the box for a misunderstanding.

I use ForceProcess just to be sure in all my boxes. I will do a clean install and a tutorial just to be sure.

paradoxicallist commented 2 years ago

@blap You say:

I've managed to install MS Office Pro Plus 2019 in sandboxie-plus 64bits 1.3.5 portable and it works fine until now.

I can run Office LTSC in sandboxie-plus 64bits 1.3.5 portable in yellow box.

Could you say what exact Office setup files you are using please? I mean exact images filenames as they show up in Microsoft? And above all, some steps how to install Office inside a sandbox cause I can't manage to do it yet. LOL

Give me your link and I will test it and make a tutorial. Or can I use this link? https://officecdn.microsoft.com/db/492350F6-3A01-4F97-B9C0-C7C6DDF67D60/media/en-US/ProPlus2021Retail.img

I'd love to have this one installed: https://officecdn.microsoft.com/db/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/media/es-mx/ProPlus2021Retail.img

Btw, if you guys need more images then have these lists: Microsoft 365 Apps (Office 365) ISO images / Version 2204 (Build 15128.20264) - updated 2022-06-23 https://pastebin.com/DSAPPn9x

Office 2021 ISO images / Version 2204 (Build 15128.20264) - updated 2022-06-23 https://pastebin.com/mrtRW2mZ

Office 2019 ISO images / Version 2105 (Build 14026.20302) - updated 2021-07-13 https://pastebin.com/4ejK0AWn

blap commented 2 years ago

Tutorial to install Office 2021 in a box:

You will need three programs:

Sandboxie-Plus. Here I will use the portable version of Sandboxie-Plus-x64-v1.3.5.exe.
7-zip (https://www.7-zip.org/download.html) or other that can extract img files.
Office image file. In this case this image: https://officecdn.microsoft.com/db/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/media/es-mx/ProPlus2021Retail.img.

In Sandboxie-Plus create a new box. In options of this box, go to Edit ini Section, edit ini, use this ini here, save and OK. To run office programs you need to put this in INI: StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service Remember to use "OpenPipePath" too with the extensions you would like to use.

my ini:

Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OfficeLicensing
Template=OfficeClickToRun
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=9
AllowNetworkAccess=<BlockNetAccess>,n
BoxNameTitle=n
FakeAdminRights=y
MsiInstallerExemptions=y
CopyLimitKb=-1
NotifyProcessAccessDenied=y
OpenWinClass=#
RpcMgmtSetComTimeout=n
OpenSamEndpoint=y
OpenLsaEndpoint=y
OpenProtectedStorage=y
ForceProcess=POWERPNT.EXE
ForceProcess=WINWORD.EXE
ForceProcess=EXCEL.EXE
ForceProcess=OfficeClickToRun.exe
StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
NotifyDirectDiskAccess=y
LingerProcess=OfficeClickToRun.exe
OpenPipePath=WINWORD.EXE,*.doc
OpenPipePath=EXCEL.EXE,*.xls
OpenPipePath=POWERPNT.EXE,*.ppt
OpenPipePath=WINWORD.EXE,*.docx
OpenPipePath=EXCEL.EXE,*.xlsx
OpenPipePath=POWERPNT.EXE,*.pptx

Download the Office image file and extract it with 7-zip in any folder. Better extract it directly in your box or move it to your box. I will use this folder in my box: C:\ProPlus2021Retail. Enter C:\ProPlus2021Retail and do not run the first Setup.exe. It will give you an error. Go to the Office folder and run Setup64.exe. Like this: setup And now... wait a lot (few hours?). You can use trace logging to make sure it is really running, like in 50% (do not block internet access! It will fail): install

paradoxicallist commented 2 years ago

God, it's been 2 hrs since I started Office installation and it seems to be half the way still... It's taking an eternity LOL

Edit: installation failed (allegedly my computer wasn't connected to the Internet but it was). I'm sick and tired so I'm done with this. Thanks anyway @blap

e-t-l commented 1 year ago

@blap after installing office, are you able to log into it with a Microsoft account? Whenever I try to log in, I enter my email and it returns a "Something went wrong" error...

blap commented 1 year ago

@blap after installing office, are you able to log into it with a Microsoft account? Whenever I try to log in, I enter my email and it returns a "Something went wrong" error...

No...

ydx1013 commented 1 month ago

EDITED

I've managed to install MS Office Pro Plus 2019 in sandboxie-plus 64bits 1.3.5 portable and it works fine until now.

To run office programs you need to put this in INI:

StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service

And to save files add "OpenPipePath" too with the extensions you would like to use.

My INI file (edited):


Enabled=y

BlockNetworkFiles=y

RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%

RecoverFolder=%Personal%

RecoverFolder=%Desktop%

BorderColor=#02f6f6,ttl,6

Template=OfficeLicensing

Template=OfficeClickToRun

Template=OpenBluetooth

Template=SkipHook

Template=FileCopy

Template=qWave

Template=BlockPorts

Template=LingerPrograms

Template=AutoRecoverIgnore

ConfigLevel=9

AllowNetworkAccess=<BlockNetAccess>,n

BoxNameTitle=n

FakeAdminRights=y

MsiInstallerExemptions=y

CopyLimitKb=-1

NotifyProcessAccessDenied=y

OpenWinClass=#

RpcMgmtSetComTimeout=n

OpenSamEndpoint=y

OpenLsaEndpoint=y

OpenProtectedStorage=y

ForceProcess=POWERPNT.EXE

ForceProcess=WINWORD.EXE

ForceProcess=EXCEL.EXE

ForceProcess=OfficeClickToRun.exe

StartProgram="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service

NotifyDirectDiskAccess=y

LingerProcess=OfficeClickToRun.exe

OpenPipePath=WINWORD.EXE,*.doc

OpenPipePath=EXCEL.EXE,*.xls

OpenPipePath=POWERPNT.EXE,*.ppt

OpenPipePath=WINWORD.EXE,*.docx

OpenPipePath=EXCEL.EXE,*.xlsx

OpenPipePath=POWERPNT.EXE,*.pptx

ClosedFilePath=!<InternetAccess>,InternetAccessDevices

ClosedFilePath=<BlockNetDevices>,InternetAccessDevices

would mind export your Office box and share with us，we cant install the Office in sandboxie

sandboxie-plus / Sandboxie