Windows Sandbox

Windows Sandbox is a powerful software development and security utility that allows the creation of a lightweight desktop environment that is completely isolated from the rest of the currently active Windows OS and the host machine, providing a safe and reliable way to run applications in isolation without the fear that it will cause software instability, OS crash, damaging of files on local storage, or even compromise PC with malicious software.

How to install and use Windows Sandbox



This enables software developers and security technicians to safely test the behavior of applications, and not worry about them being capable of impacting the function of the host machine.

Windows Sandbox has the following properties:

• Part of Windows: Everything required for this feature is included in Windows 10 Pro and Enterprise. There's no need to download a VHD.
• Pristine: Every time Windows Sandbox runs, it's as clean as a brand-new installation of Windows.
• Disposable: Nothing persists on the device. Everything is discarded when the user closes the application.
• Secure: Uses hardware-based virtualization for kernel isolation. It relies on the Microsoft hypervisor to run a separate kernel that isolates Windows Sandbox from the host.
• Efficient: Uses the integrated kernel scheduler, smart memory management, and virtual GPU.

This security application has only one function, to provide users with a perfectly stable sandbox instance, where they can test out various software without the fear of host computer infection, crashing, or any other similar effect. Once finished, the entire instance is deleted, with no traces of any testing procedure remaining, and with all files and apps discarded and deleted. Each sandbox instance is created from scratch, offering an identical testing environment.

To completely isolate each sandbox from the host machine, Windows Sandbox utilizes the latest hardware-virtualization technologies developed for complete isolation of the host kernel. Powered by Windows hypervisor, smart memory management, and virtual GPU technology, each sandbox instance is created in just a few seconds, offering seasoned users the ability to test unfinished apps and malicious software in total isolation from the rest of their PC.

The latest version of Windows Sandbox is optimized for use only on Windows 10 (Pro, Enterprise, or Education versions) and Windows 11 (except on its Home version), and it requires the presence of a 64-bit processor and virtualization support in the host BIOS settings.  Once those requirements are met, users can easily install it both on physical and virtual machine environments.

Usage

• Copy an executable file (and any other files needed to run the application) from the host and paste them into the Windows Sandbox window.
• Run the executable file or installer inside the sandbox.
• When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select Ok.
• Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox.

Since many Windows PCs already have this app preinstalled, they can simply activate it by going to the “Windows Features” configuration dashboard and checking the Windows Sandbox option. In the event that the “Windows Sandbox” option is greyed out, this means that BIOS support has not been properly activated. If the service is not preinstalled and is missing from the Windows Features list, it can be deployed on any compatible Windows OS using an installation package.

Prerequisites

• Windows 10 Pro, Enterprise or Education build 18305 or Windows 11 (Windows Sandbox is currently not supported on Windows Home edition)
• AMD64 or (as of Windows 11 Build 22483) ARM64 architecture
• Virtualization capabilities enabled in BIOS
• At least 4 GB of RAM (8 GB recommended)
• At least 1 GB of free disk space (SSD recommended)
• At least two CPU cores (four cores with hyperthreading recommended)

Starting a new Windows Sandbox is as easy as simply starting an app from the Start Menu. Once the instance is activated, a new app or software can be transferred to it, installed, activated, and observed using any needed monitoring software.

PROS

• Easy to Use
• Isolated Environment for Testing
• No Risk of Permanent System Changes
• Can Run Potentially Harmful Programs Safely

CONS

• Limited Resource Allocation
• Not Available on All Windows Versions
• Requires Hardware Virtualization Support