In the new CIS v4.0, when a program is “Automatically Sandboxed”, which directory are the virtualized files kept? I notice that the C:\Sandbox directory is only used for manually sandboxed programs.
also
Is it possible to change the restriction level of an “Automatically Sandboxed” program?
The automatically sandboxed programs doesn’t virtualize a file system in CIS v4.0.
And the restriction level can not be changed for “Automatically Sandboxed” program.
Probably it would be possible to manually configure sandbox restrictions rules for specific executables and thus override automated sandbox on a per app basis.