Windows Sandbox

E37360

Windows Sandbox is a lightweight, isolated virtual environment built into Windows that lets users safely run and test untrusted applications without affecting the host system.


Statements (50)
Predicate Object
instanceOf Windows security feature
sandbox environment
virtualization feature
canBeConfiguredVia configuration file (.wsb)
category application isolation technology
endpoint security control
defaultNetworkSetting enabled networking
defaultState clean Windows installation image
developer Microsoft
distribution included with Windows
enabledVia DISM
PowerShell
Windows Features dialog
environmentType temporary virtualized Windows instance
featureOf Windows 10 Enterprise
Windows 10 Pro
Windows 11 Enterprise
Windows 11 Pro
integrationWithHost file copy and paste
shared clipboard
introducedInVersion Windows 10 version 1903
isolationType hardware-based virtualization
kernel isolation
licensing no additional license required
lifecycle created on demand
destroyed when closed
operatingSystem Windows 10
Windows 11
persistence non-persistent
purpose isolate potentially malicious software
safely run untrusted applications
test software without affecting the host system
releaseYear 2019
requiresEdition Enterprise edition
Pro edition
requiresHardwareFeature 64-bit processor
BIOS or UEFI virtualization enabled
at least 4 GB RAM
hardware virtualization support
securityBenefit limits impact of malware
prevents permanent system changes
reduces risk when opening unknown executables
stateAfterClose all data is discarded
supportsConfigurationOption logon command
mapped folders
networking
vGPU
userInterface desktop window similar to a separate PC
usesTechnology Hyper-V
Windows containers

Referenced by (1)
Subject (surface form when different) Predicate
Windows
supportsVirtualization

Please wait…