Windows Installer

[Meroviking]

Describe what you noticed and did

Windows Installer

SBIE2205 Service not implemented: NtSaveKeyEx

How often did you encounter it so far?

Always

Affected program

Windows installer

Download link

Not available

Where is the program located?

I tried to install it only inside a sandbox, but I wasn't able to achieve it.

Expected behavior

Install success

What is your Windows edition and version?

21H2

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

None active

What version of Sandboxie are you running?

5.61.x

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

No response

In which sandbox type you have this problem?

All sandbox types (I tried them all).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

#
# Sandboxie configuration file
#

[GlobalSettings]
DefaultBox=AlmostNoSec
FileRootPath=\??\%SystemDrive%\Sandbox\%USER%\%SANDBOX%
KeyRootPath=\REGISTRY\USER\Sandbox_%USER%_%SANDBOX%
IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION%
Template=WindowsLive
Template=OfficeLicensing
Template=Edge_Fix
SeparateUserFolders=n
EnableObjectFiltering=n
EnableWin32kHooks=n

[UserSettings_10E94700]
SbieCtrl_AutoStartAgent=SandMan.exe
SbieCtrl_EnableAutoStart=y

[AlmostNoSec]
Enabled=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00fd00,ttl,6
Template=RpcPortBindingsExt
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
NoSecurityIsolation=y
AllowNetworkAccess=<BlockNetAccess>,n
AutoRecover=n
RpcMgmtSetComTimeout=n
UnrestrictedSCM=y
NoAddProcessToJob=y
RunServicesAsSystem=y
ExposeBoxedSystem=y
StripSystemPrivileges=n
BoxNameTitle=n
BlockNetParam=n
MsiInstallerExemptions=y
CopyLimitKb=81920
OpenPipePath=<BlockNetDevices>,InternetAccessDevices
OpenWinClass=#
PreferExternalManifest=y
ApplyElevateCreateProcessFix=y

[bastik-1001]

Does this happen with an installer for a specific program, or is every Windows Installer effected by this issue?

Nice to see that, MsiInstallerExemptions=y has been tried, even though it did not help.

At the time of writing, the latest stable version is 5.63.4 (1.8.4), but I am not sure if something could have fixed the issue along the way.

[Meroviking]

This happens just with "some" specific installers. Screenshot: MSI by Wix. Toolchain from around 2018/2019.
As seen in the screenshot: It actually finished and is just failing during removal of the backup files. I even suspected some timing problem since the Windows error reporter is jumping in arbitrarily during this time frame.

I tried also the latest build: Same error. I again constantly removed more and more restrictions and the installers progress increased but never succeeded. The latest build shows this and error reporter does not start.

Related in part: #2328 (comment)

[Meroviking]

I will try to provide a minimum non-working installer file. I will come back to this thread once I have it and it is then still not working with the latest version.

[github-actions]

As it has been 3 months since the last activity, we are automatically closing this issue in 14 days. If it is still present, please respond to help us investigate on newer Sandboxie versions. Thank you for your contribution!

[SerialVelocity]

I think the Microsoft C++ 2010 Redistributable (x64) installer encounters this problem. This was a dependency of something I was trying to install.

[github-actions]

As it has been 3 months since the last activity, we are automatically closing this issue in 14 days. If it is still present, please respond to help us investigate on newer Sandboxie versions. Thank you for your contribution!

[SerialVelocity]

Still valid

[Bjoern75900]

Yep, still the same

[github-actions]

As it has been 3 months since the last activity, we are automatically closing this issue in 14 days. If it is still present, please respond to help us investigate on newer Sandboxie versions. Thank you for your contribution!

[SerialVelocity]

Afaik, still the same