SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to check, from within solution, if it was deployed as sandboxed or not, e.g. something like this:

    // do something
    // do something else
share|improve this question
up vote 17 down vote accepted

Not out-of-the-box AFAIK.

You could check it like this:

if(AppDomain.CurrentDomain.FriendlyName ==
    "Sandboxed Code Execution Partially Trusted AppDomain") {
    // I'm playing in the sandbox!
share|improve this answer
Good hack, but sounds like something that will break in the future. – Muhimbi Mar 26 '10 at 6:30
Yea, unfortunatley you cannot check the actual name of the process since that is not allowed. It will throw a SecurityException. – Wictor Wilen MCA MCM MVP Mar 26 '10 at 7:36
Awesome stuff! I really need to read your book as soon as possible :) – Toni Frankola Mar 26 '10 at 9:03
Could break, true. To minimise that risk, you would obviously make that string configurable. – Jaap Vossers Mar 26 '10 at 10:46
yup, e.g. in Beta2 it was called "User Code Execution Partially Trusted AppDomain". But this will be okey. – Toni Frankola Mar 26 '10 at 15:17

AFAIK there is no foolproof way to do this unfortunately. I know Microsoft's SharePoint Patterns & Practices team are using:


So if that's the best they've come up with, it's fair to say that's as good as it gets. Obviously some static helper method is the way to go rather than having this check littered through your code.

EDIT: IMHO this is far preferable to running some forbidden code and catching the exception, due to perf reasons.

share|improve this answer

Another equally hacky approach would be to try to do something that isn't allowed in the sandbox and catch the resulting exception. Something like this:

static bool? _isSandboxed;
static bool IsSandboxed() {
    if(!_isSandboxed.HasValue) {
        try {
            SPSecurity.RunWithElevatedPrivileges(delegate { });
            _isSandboxed = false;
        } catch (PolicyException) {
            _isSandboxed = true;
    return _isSandboxed.Value;
share|improve this answer
Yea, that's another approach but like mine it can fail. Assume that you deploy an application to the WebApplication (bin) and disallow RWEP with CAS? – Wictor Wilen MCA MCM MVP Mar 26 '10 at 10:18
You're right, and I was only half serious about this, anyway. :-) – Rytmis Mar 26 '10 at 13:33
Btw. while I agree that this isn't a good solution, saying that it's because of poor performance is silly. This code throws a single exception once (possibly twice, allowing for race conditions). That's not very expensive. – Rytmis Mar 26 '10 at 18:23
I dont like using exceptions to check if somthing is there or not. – Heiko Hatzfeld Jun 24 '11 at 15:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.