Closed Key Path

ClosedKeyPath is a sandbox setting in Sandboxie Ini. It specifies path patterns for which Sandboxie will deny all access by sandboxed programs, including read access. This setting essentially blocks registry keys from being accessed by sandboxed programs.

Program Name Prefix may be specified.

Example:

   .
   .
   .
   [DefaultBox]
   ClosedKeyPath=!msimn.exe,HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager

The example blocks any program other than Outlook Express (msimn.exe) from accessing the registry key containing configured email accounts for the active user account.

The value specified for ClosedKeyPath can include wildcards, although for registry keys, the use of wildcards is rarely needed. For more information on this, including examples that show the use of wildcards, see OpenFilePath. (OpenFilePath deals with files, not registry keys, but the principle of using wildcards remains the same.)

Note: ClosedKeyPath only blocks access to registry keys outside the sandbox, which have not yet been copied (or created) in the sandbox.

Note: Unlike the corresponding OpenKeyPath setting, the ClosedKeyPath settings are always applied to programs in the sandbox, regardless of whether the program's executable file is inside or outside the sandbox.

Related Sandboxie Plus setting: Sandbox Options > Resource Access > Registry > Add Reg Key > Access column > Closed