Windows Sandbox released by Microsoft

视窗 Sandbox released by Microsoft.

视窗 Sandbox is a new lightweight desktop environment tailored for safely running applications in isolation.

How many times have you downloaded an executable file, but were afraid to run it? Have you ever been in a situation which required a clean installation of 视窗, but didn’t want to set up a 虚拟机?

At Microsoft we regularly encounter these situations, so we developed视窗 Sandbox: an isolated, temporary, desktop environment where you can run untrusted software without the fear of lasting impact to your PC. Any software installed in 视窗 Sandbox stays only in the sandbox and cannot affect your host. Once 视窗 Sandbox is closed, all the software with all its files and state are permanently deleted.

视窗 Sandbox has the following properties:

• Part of 视窗 – everything required for this feature ships with 视窗 10 Pro and Enterprise. No need to 下载 a VHD!
• Pristine – every time 视窗 Sandbox runs, it’s as clean as a brand-new installation of 视窗
• Disposable – nothing persists on the device; everything is discarded after you close the application
• Secure – uses hardware-based virtualization for kernel isolation, which relies on the Microsoft’s hypervisor to run a separate kernel which isolates 视窗 Sandbox from the host
• Efficient – uses integrated kernel scheduler, smart memory management, and virtual GPU

Prerequisites for using the feature

• 视窗 10 Pro or Enterprise build 18305 or later
• AMD64 architecture
• Virtualization capabilities enabled in BIOS
• At least 4GB of 内存 (8GB recommended)
• At least 1 GB of free disk space (SSD recommended)
• At least 2 CPU cores (4 cores with hyperthreading recommended)

Quick start

1. 安装 视窗 10 Pro or Enterprise, 建造 18305 or newer
2. Enable virtualization:
   • If you are using a physical machine, ensure virtualization capabilities are enabled in the BIOS.
   • If you are using a 虚拟机, enable nested virtualization with this 电源外壳 cmdlet:
   • Set-VMProcessor -VMName <VMName> -ExposeVirtualizationExtensions $true
3. 打开 视窗 特征, and then select 视窗 Sandbox. 选择好的 to install 视窗 Sandbox. You might be asked to restart the computer.

5. Using the开始 menu, 寻找 视窗 Sandbox, run it and allow the elevation
6. Copy an executable file from the host
7. Paste the executable file in the window of 视窗 Sandbox (on the 视窗 desktop)
8. Run the executable in the 视窗 Sandbox; if it is an installer go ahead and install it
9. Run the application and use it as you normally do
10. When you’re done experimenting, you can simply close the 视窗 Sandbox application. All sandbox content will be discarded and permanently deleted
11. Confirm that the host does not have any of the modifications that you made in 视窗 Sandbox.