In an age where cybersecurity threats are constantly evolving, creating a secure environment to test applications or run risky software is essential. Windows Sandbox provides a lightweight virtual machine that allows you to run untrusted applications in isolation. In this article we will show you how to create a secure environment with Windows Sandbox.

Before diving into the setup process, it's important to understand what Windows Sandbox is. Essentially, it is a temporary, lightweight, and isolated desktop environment that allows you to run software without fear of affecting your primary operating system.
Windows Sandbox is designed for testing, not for running mission-critical apps or for long-term use. The changes made in the Windows Sandbox environment are discarded once the sandbox is closed, ensuring that your primary system remains unaffected.
System requirements
To use Windows Sandbox, ensure your system meets the following prerequisites:
- Windows version: Professional or Enterprise versions of Windows (10/11). The Home version is not supported.
- Virtualization support: Your PC needs to have virtualization enabled in the BIOS/UEFI settings. Most modern CPUs support this feature (Intel VT-x or AMD-V).
- RAM: At least 4 GB of RAM is required, but 8 GB is recommended for performance.
- CPU: A minimum of two (2) cores is needed, with a 64-bit processor.
- Disk space: At least 1 GB of free disk space is required.
Enabling Windows Sandbox
To get started, you need to enable Windows Sandbox on your system using the Control Panel:
- Open a Run dialog box by pressing the Windows logo key
+ R, type Control, and then left-click on OK to bring up the Control Panel.
- Left-click on either Programs (category view) and then Programs and Features or Programs and Features (large/small icons view).
- In the left column, left-click on Turn Windows features on or off.
- The Windows Features dialog box will appear. Scroll down the list, place a check mark next to Windows Sandbox,

and then left-click OK. Windows will then install the required files for Windows Sandbox.
You may need to restart your computer for the changes to take effect.
Launching Windows Sandbox
Once the installation is complete, you can launch Windows Sandbox:
- Left-click on the Start
button to bring up the Start menu.
- In the upper right-hand corner of the Start menu, left-click on All apps.
- Scroll down the list of programs and left-click on Windows Sandbox.
After a brief loading period, you will see a clean Windows desktop, similar to your primary system but in a contained environment.
Customizing Windows Sandbox
While Windows Sandbox operates perfectly out of the box, there are ways to customize it to fit your needs. You can create a configuration file that enables features such as clipboard sharing, folder sharing, and more.
- Create a configuration file: Use a simple text editor to create a configuration file with the extension .wsb. Here’s a sample XML configuration file:
<Configuration>
<Networking>enable</Networking>
<Clipboard>enable</Clipboard>
<MappedFolders>
<MappedFolder>
<HostFolder>C:\Users\YourUsername\Folder</HostFolder>
<SandboxFolder>C:\Users\YourUsername\Desktop\Folder</SandboxFolder>
<ReadOnly>true</ReadOnly>
</MappedFolder>
</MappedFolders>
</Configuration>
- Save the file: Save it with a .wsb extension so you can double-click it to launch the Windows Sandbox with your desired settings.
For more detailed information on configuring Windows Sandbox, please refer to the following article.
Use and configure Windows Sandbox
Using Windows Sandbox securely
- Transfer Files: You can transfer files to the sandbox by copying them from your primary system. If you have set up folder mappings, this process becomes easier.
- Testing Applications: Download or install the software you wish to test. Since the environment is isolated, any malware or viruses will not affect your primary OS.
- Internet Access: Windows Sandbox has internet access by default, allowing you to test various online applications safely.
Closing Windows Sandbox
When you are finished, simply close the Windows Sandbox window. All data, applications, and changes made during the session will be discarded, ensuring your primary operating system remains untarnished.
Benefits of Using Windows Sandbox
- Isolation: Applications run in a completely isolated environment, preventing them from interacting with the host OS.
- No permanent changes: All changes made in the Windows Sandbox are temporary and discarded when the sandbox is closed.
- Easy setup: It’s easy to enable and use without needing complex configurations.
- Cost-effective: It eliminates the need for third-party virtual machines or additional software.
Limitations
While Windows Sandbox is powerful, it does have some limitations. It does not support running 32-bit applications on 64-bit Windows, and you cannot run multiple instances concurrently. Additionally, it is not intended for long-term usage or permanent installations of applications.
In conclusion, Windows Sandbox is an effective tool for creating a secure environment on Windows. By following the steps outlined, you can safely test applications and explore various software without compromising your primary system’s integrity. This feature exemplifies built-in security measures that make Windows not just a powerful operating system but also a secure one for both personal and professional use.