Out-of-process com sandboxie support for winrt and the com server provided by the service program....How to do it?

[lmou523]

After my analysis, I found that the problems above win11 are caused by com, such as uwp programs, cameras, and contextmenu in the explorer.

For traditional cocreatinstance/cogetclassobject interface, such as sandboxie has a series of processing to make them run normally, but for the winrt provide RoGetActivationFactory without processing.

And more and more COMs are turning into services (svchost)/in-system agents (SIhost...), which causes a lot of software inside the sandbox to not function properly.

These causes lead to a series of problems with the operation of programs in the sandbox (com caused)

Example:
The msix packaged application needs the support of the usermanager service and sihost to run, and if the com they support is removed, the application will most likely run under the dcom service outside the sandbox