Windows Sandbox on Windows 10 and Windows 11 — How to Enable, Configure, and Use

Windows Sandbox is an isolated virtual environment designed for the safe testing of applications and files. It's ideal for situations where you need to open an unfamiliar app or file without risking harm to your main system. In this article, we’ll explore how to enable, configure, and use the sandbox in Windows 10 and Windows 11.

What is Windows Sandbox?

Windows Sandbox is a built-in Windows feature that allows you to run a temporary virtual environment. It launches in seconds and erases itself as soon as the session is closed. Everything you do within the sandbox stays isolated from the main system, making it an invaluable tool for testing suspicious files and programs.

Requirements for Windows Sandbox

To use Windows Sandbox, you’ll need:

  • Windows 10 Pro, Enterprise, or Windows 11 Pro, Enterprise.
  • A 64-bit version of the operating system.
  • A processor that supports virtualization (e.g., Intel VT-x or AMD-V).
  • At least 4 GB of RAM (8 GB or more is recommended).
  • At least 1 GB of free disk space.

How to Enable Windows Sandbox

Windows Sandbox may be disabled by default, so to start using it, you’ll need to activate it. Follow these steps:

  1. Open the Control Panel and go to Programs and Features.
  2. Click on Turn Windows features on or off.
  3. Find Windows Sandbox in the list and check the box.
  4. Click OK, then restart your computer to complete the installation.

After the restart, the feature will be available, and you can open it from the Start menu.

Configuring Windows Sandbox

Although the sandbox is designed to automatically create an isolated environment, you can customize it by creating a configuration file. This allows you to, for example, share folders from your main system or adjust network settings.

To create a configuration file:

  1. Create a text file with the extension .wsb — for example, config.wsb.
  2. Use the following syntax for your configuration:
<Configuration>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:\Path_to_folder</HostFolder>
      <ReadOnly>false</ReadOnly>
    </MappedFolder>
  </MappedFolders>
  <Networking>Default</Networking>
  <LogonCommand>cmd.exe /c Path_to_program</LogonCommand>
</Configuration>

Run the sandbox with this configuration file, and it will launch with your custom settings. This is particularly useful for automation or for testing programs that require specific environment settings.

Using Windows Sandbox

Once enabled and configured, you can start using Windows Sandbox as follows:

  • Open the sandbox from the Start menu or by using the created configuration file.
  • Drag and drop the files you want to test into the Sandbox window (they won’t affect your main system).
  • Run the files and work with them without worrying about system safety.
  • When finished, close the Sandbox window — all data, including installed apps and downloaded files, will be automatically erased.

Key Benefits of Windows Sandbox

Using Windows Sandbox offers several advantages:

  • Security: Complete isolation from the main system.
  • Ease of use: Quick to set up and delete.
  • Minimal configuration: No complex setup needed, though customization is available if required.

Frequently Asked Questions

Can I use Windows Sandbox on the Home version of Windows?

Unfortunately, this feature is only available in Pro and Enterprise versions. If you’re on the Home version, an upgrade to the Pro or Enterprise version is required.

Are files automatically deleted after closing the Sandbox?

Yes, each Windows Sandbox session starts fresh. All files, installed programs, and settings are deleted upon closing, restoring the sandbox to its original state.

How safe is it to test suspicious files in Sandbox?

Windows Sandbox provides a high level of security by isolating tested files and applications. However, for maximum safety, it’s recommended to use antivirus software, especially if dealing with high-risk files.