Earth said:
Could you explain the problems of Full Virtualisation of the Auto-Sandbox, in brief?
There are too many applications that aren't going to work if they are shuffled off into a virtualized file system. With the manual sandbox, it's not that difficult to find applications that will not run inside it. If an application relies upon standard .dll's in the OS or other resources that are outside the sandbox, the application isn't going to work.
If this happened automatically, the average user isn't going to know what went wrong. All they'll know is that the application doesn't work with CIS installed. So they'll just uninstall CIS instead of trying to figure out what the problem is. There are already applications that aren't happy when the auto-sandbox just institutes the default partially limited access restrictions. Virtualizing them would just increase the breakage potential.
And what happens when a user isn't aware that something has been running in the sandbox and they delete the sandbox contents? They could lose data they weren't prepared to lose.
So when faced with the possibility of breaking countless applications and having millions of users uninstalling their product, they decided the full virtualization auto-sandbox wasn't worth the risk for mass consumption.