• Sandboxed Windows Explorer
  • In Sandboxie Control: Run Sandboxed -> Windows Explorer
  • Files cut (or copied) in a sandboxed Windows Explorer window, can be pasted into any unsandboxed application
  • The SandboxieExplorer replacement for Windows Explorer has been discontinued

• Sandboxed Windows Installer
  • Starts and stops automatically as needed
  • Run Sandboxed -> Windows Installer has been discontinued
  • Can install packages from network shares

• Sandboxed Installation of Win32 Services
  • Happens transparently and automatically as part of sandboxed installation, if needed
  • Note, this does not refer to drivers

• Stronger protection of window-to-window communications
  • Sandboxed applications can't destroy windows of an application outside the sandbox
  • Sandboxed applications can't communicate with windows outside the sandbox
  • Can be overriden with OpenWinClass
  • Sandboxed applications can't send fake keyboard input to windows outside the sandbox
  • Can be overriden with BlockFakeInput

• Sandboxing of Win32 Hooks
  • System-global hooks are converted into application-level hooks, and directed to sandboxed applications only
  • Can be overridden with BlockWinHooks
  • Earlier versions of Sandboxie allow a sandboxed program to install a global hook DLL, if the hook DLL file is located outside the sandbox

• Support for read-only files and registry keys
  • See ReadFilePath and ReadKeyPath
  • Can be used by administrators to make sure sandboxed applications can't bypass system policy by modifying the sandboxed copy of the Policies registry key

• Sandboxie no longer needs a system restarts when upgrading or removing the program
  • Note that upgrading from an earlier version, such as 2.86, will still require a restart

• Improved support for Windows Vista

• Revised 'Temporarily Disable Forced Programs':
  • Applies only in the login session where it is used, as opposed to being applied globally to Sandboxie in earlier versions
  • Can be disabled (see ForceDisableSeconds)

Smaller changes:

• No error message if OpenFilePath et al specify a drive letter that isn't available (Useful when used with portable hard drives that may not always be available)
• Support for more devices inside the sandbox, specifically, webcams
• Sandbox name can be displayed in title bar. See BoxNameTitle
• Reduced chance for SBIE1406 errors
• When re-creating a deleted sandboxed folder, for which there is a corresponding real folder, the folder will be re-created empty. In earlier versions, the folder would re-created with the contents of the real folder.