Windows Sandbox

Windows Sandbox 是微軟提供的輕量隔離環境工具，能在不影響主系統的前提下，建立一個與目前 Windows 完全獨立的桌面空間，用來安全執行可疑或未經測試的應用程式。它的核心特色在於「開箱即用」的隔離機制，不需額外安裝虛擬機器軟體，就能避免軟體造成系統不穩、檔案損毀或惡意程式入侵。目前收錄的版本單一，更新並不頻繁，在開發者工具分類中屬於中等熱門，評價樣本不多但普遍正面。

這套工具特別適合軟體開發者、資安研究人員，或任何需要反覆測試安裝檔、外掛、腳本行為的使用者。與 BlueStacks、VMware Workstation Player 等替代方案相比，Windows Sandbox 更輕量、啟動更快，但功能較單純，無法自訂虛擬硬體或長期保存環境。使用前需留意系統版本是否支援此功能，且介面僅提供英文，對不熟悉英文操作的使用者可能稍有門檻。

Windows Sandbox is a powerful software development and security utility that allows the creation of a lightweight desktop environment that is completely isolated from the rest of the currently active Windows OS and the host machine, providing a safe and reliable way to run applications in isolation without the fear that it will cause software instability, OS crash, damaging of files on local storage, or even compromise PC with malicious software.

How to install and use Windows Sandbox



This enables software developers and security technicians to safely test the behavior of applications, and not worry about them being capable of impacting the function of the host machine.

Note: Starting with Windows 11, version 22H2, data persists through restarts initiated within the sandbox, useful for applications requiring a reboot.

Windows Sandbox has the following properties:

• Part of Windows: Everything required for this feature is included in Windows 10 Pro and Enterprise. There's no need to download a VHD.
• Pristine: Every time Windows Sandbox runs, it's as clean as a brand-new installation of Windows.
• Disposable: Nothing persists on the device. Everything is discarded when the user closes the application.
• Secure: Uses hardware-based virtualization for kernel isolation. It relies on the Microsoft hypervisor to run a separate kernel that isolates Windows Sandbox from the host.
• Efficient: Uses the integrated kernel scheduler, smart memory management, and virtual GPU.

This security application has only one function, to provide users with a perfectly stable sandbox instance, where they can test out various software without the fear of host computer infection, crashing, or any other similar effect.

Once finished, the entire instance is deleted, with no traces of any testing procedure remaining, and with all files and apps discarded and deleted. Each sandbox instance is created from scratch, offering an identical testing environment.

To completely isolate each sandbox from the host machine, Windows Sandbox utilizes the latest hardware-virtualization technologies developed for complete isolation of the host kernel.

Powered by Windows hypervisor, smart memory management, and virtual GPU technology, each sandbox instance is created in just a few seconds, offering seasoned users the ability to test unfinished apps and malicious software in total isolation from the rest of their PC.

The latest version of Windows Sandbox is optimized for use only on Windows 10 (Pro, Enterprise, or Education versions) and Windows 11 (except on its Home version), and it requires the presence of a 64-bit processor and virtualization support in the host BIOS settings.

Once those requirements are met, users can easily install it both on physical and virtual machine environments.

Usage

• Copy an executable file (and any other files needed to run the application) from the host and paste them into the Windows Sandbox window.
• Run the executable file or installer inside the sandbox.
• When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select Ok.
• Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox.

Since many Windows PCs already have this app preinstalled, they can simply activate it by going to the “Windows Features” configuration dashboard and checking the Windows Sandbox option.

In the event that the “Windows Sandbox” option is greyed out, this means that BIOS support has not been properly activated. If the service is not preinstalled and is missing from the Windows Features list, it can be deployed on any compatible Windows OS using an installation package.

Prerequisites

• Windows 10 Pro, Enterprise or Education build 18305 or Windows 11 (Windows Sandbox is currently not supported on Windows Home edition)
• AMD64 or (as of Windows 11 Build 22483) ARM64 architecture
• Virtualization capabilities enabled in BIOS
• At least 4 GB of RAM (8 GB recommended)
• At least 1 GB of free disk space (SSD recommended)
• At least two CPU cores (four cores with hyperthreading recommended)

Starting a new Windows Sandbox is as easy as simply starting an app from the Start Menu. Once the instance is activated, a new app or software can be transferred to it, installed, activated, and observed using any needed monitoring software.

PROS

• Easy to Use
• Isolated Environment for Testing
• No Risk of Permanent System Changes
• Can Run Potentially Harmful Programs Safely

CONS

• Limited Resource Allocation
• Not Available on All Windows Versions
• Requires Hardware Virtualization Support

Download Windows Sandbox Latest Version Why is this app published on FileHorse? (More info)