

And ‘Direct Map’ allows the sandbox to securely use the same physical memory pages as the host OS. Memory management is also slightly different, allowing the host to reclaim memory from the sandbox if required. The base image is around 100MB in size and only 25MB in compressed form when Windows Sandbox is not installed. Windows Sandbox uses a dynamically generated image based on the host’s Windows 10 installation, meaning you won’t have to manually download a VHD file or install Windows from an ISO file in the sandbox. As soon as the sandbox window is closed, all the files and changes made are discarded.

Once Windows has booted in the sandbox, you can copy any files you want to run on the desktop from the host device. You’ll need to provide UAC consent to run the sandbox. Once the installation is complete, you can start the sandbox from the Start menu. You might be prompted to restart your device.

Under Programs and Features, click Turn Windows features on or off.Windows Sandbox is a built-in Windows feature which you can enable from the Control Panel.

You must be running Windows 10 (18305 or later) 64-bit Pro or Enterprise SKUs, with at least 4GB of RAM, virtualization capabilities enabled in the BIOS, 1GB of free disk space, and at least 2 CPU cores. There are a few prerequisites before you can use Windows Sandbox. And unlike Hyper-V virtual machines, you won’t need to download load a Windows image file to work with Windows Sandbox. Every time Windows Sandbox is started, users are presented with a clean installation of Windows, meaning no files are preserved from the previous session. Windows Sandbox provides an isolated, temporary desktop where users can run software that might make unwanted changes to Windows. InPrivate Desktop Renamed Windows Sandbox As Brad reported, this feature is now being officially previewed in the latest Windows Insiders update for Windows 10, build 18305. Exposed during a bug-bash quest in the Feedback Hub, the text of the quest said that InPrivate Desktop would provide admins a way to launch a throwaway sandbox for secure, one-time execution of untrusted software. Back in August, I wrote on Petri about a new feature that Microsoft was reportedly introducing in Windows 10 Enterprise called InPrivate Desktop.
