What is Windows Sandbox?
A clean Windows desktop that runs separately from the host by using hardware-based virtualization. Close the Sandbox and the software, files and state inside it are discarded.
Know the playground
before you play.
Windows Sandbox is Microsoft's lightweight, isolated and disposable Windows environment. Use this page as a practical starting point, then jump straight into the official Microsoft documentation for the details.
What is it useful for?
Testing applications, troubleshooting installers, opening unfamiliar files, trying development tools, validating scripts and creating short-lived test environments without maintaining a full VM.
Disposable, not magic
Isolation reduces risk, but configuration still matters. Networking, clipboard sharing and writable mapped folders connect the Sandbox to resources outside the isolated environment.
GET STARTED
Install Windows Sandbox
Windows Sandbox is available on supported Windows editions and requires virtualization support. Microsoft recommends at least 4 GB RAM, 1 GB free disk space and two CPU cores; more memory and cores improve the experience.
1Check prerequisitesSupported Windows edition, virtualization enabled and sufficient hardware.
2Enable Windows SandboxOpen Windows Features, enable Windows Sandbox and restart if requested.
3Launch itOpen Windows Sandbox normally, or double-click a custom .wsb configuration.
WSB CONFIGURATION
What can a .wsb file control?
A Windows Sandbox configuration file is XML with the .wsb extension. It can control the most useful Sandbox settings without requiring a separate VM definition.
Think about what you redirect.
Networking is enabled by default. Microsoft specifically notes that network access can expose untrusted applications to the internal network. Mapped folders can also expose host data, particularly when write access is enabled.
For suspicious content, a useful pattern is to disable networking and map only the required folder as read-only.
<Configuration>
<Networking>Disable</Networking>
<MappedFolders>
<MappedFolder>
<HostFolder>C:\Samples</HostFolder>
<ReadOnly>true</ReadOnly>
</MappedFolder>
</MappedFolders>
</Configuration>OFFICIAL DOCUMENTATION
Go deeper with Microsoft Learn
These are the primary references worth bookmarking. Build My Sandbox links to them rather than trying to duplicate Microsoft's full documentation.
OverviewWindows SandboxConcepts, capabilities, use cases and security notes.↗SetupInstall Windows SandboxPrerequisites and installation guidance.↗ConfigurationUse .wsb filesAll supported configuration settings and examples.↗ReferenceWindows Sandbox FAQCommon questions about concepts and usage.↗AutomationWindows Sandbox CLIStart, list and manage Sandbox sessions from the command line.↗ManagementWindowsSandbox Policy CSPDevice-management controls for Sandbox capabilities.↗
READY TO BUILD?
Open the builder →Turn the docs into a working .wsb.
Choose the tools and settings you want, inspect the generated configuration and launch your disposable Windows playground.