Surf & Test Software Safely In Windows Sandbox

Sandboxing is an isolation method whereby all data relating to an online surfing session or installation of software is encapsulated within a special container (or Sandbox), completely separate from the system. Emptying the container (Sandbox) at the end of the session means that zero data is recorded or retained, everything is gone, including any malware or nasties picked up along the way.

I’ve been using third-party software called Sandboxie for many years, not only to test dubious software but also when researching articles for DCT. My research can take me anywhere on the web and surfing within the sandbox assures that I am not running the risk of inadvertently infecting my system. On a side note: Sandboxie used to be a freemium model with both free and premium editions available but was recently acquired by Sophos and is now completely free including all premium features.

Windows 10 Sandbox

Windows 10 Sandbox is a strange animal– it’s not really a sandbox in the true sense but more of a basic VM (virtual machine) running as an app. The principle, however, is very similar. Whatever you do within Windows Sandbox, as soon as you close out the VM, all associated data is immediately expunged, without ever getting anywhere near your actual system. What makes Windows Sandbox appealing, over something like Hyper-V for example, is its comparative simplicity and ease-of-use. Anyone, regardless of their level of computer proficiency, should be able to easily work with Windows Sandbox.

Unfortunately, Windows Sandbox is not available for Windows 10 Home users. Here are the full system requirements:

  • Windows 10 Pro, Enterprise, or Server
  • A 64-bit processor capable of virtualization, with at least two CPU cores
  • Virtualization enabled in BIOS, if not already
  • At least 4GB of RAM (8GB recommended)
  • At least 1GB of free disk space (SSD recommended)

You can quickly check via Task Manager to see if virtualization is already enabled. Open Task Manager, go to the Performance tab and look for Virtualization on the right:

Enabling Windows Sandbox

Windows Sandbox is not enabled by default and you’ll need to go to Control Panel > Programs and Features and click Turn Windows features on or off in the left-hand panel:

In the Windows Features window, scroll down to Windows Sandbox and enable it:

Click OK and a new window will open with a progress bar and you’ll receive a couple of messages; Searching for required files followed by Making changes. When the process has completed, took about 30 seconds on my machine, you’ll be required to Restart the system in order to apply the changes.

Working With Windows Sandbox

Once enabled, to start Windows Sandbox, open the Start Menu and type Windows Sandbox:

If it’s something you think you might use regularly, you can select the options to either Pin to Start or Pin to taskbar.

The Windows Sandbox window will take a little time to open on the first run and you will see right away that it resembles a very basic version of Windows 10:

You cannot access any apps or third party programs and browsing online is restricted to using Edge only. The VM creates the usual user directories — documents, downloads, pictures, Music, Videos — but these are pristine (empty folders) created specifically by and for the VM and not your normal system user folders.

Surf Safely In Windows Sandbox

To surf safely, simply run Edge within Windows Sandbox and surf around until your heart’s content. When you’ve finished your session, close out by clicking the X in the top right corner of the Windows Sandbox window and you’ll receive the following message:

Click OK and everything is gone.

Test Software In Windows Sandbox

You can install software within Windows Sandbox to check out dubious software, test the installation process for added potentially unwanted programs, or just to check out software before installing it in the system proper. Use Edge to navigate to and download the software, then simply run the downloaded executable as per normal, either via the options in Edge or from the virtual Download folder. Again, when you’ve finished testing the software, close out Windows Sandbox and everything will be gone.

NOTES:

  • For obvious reasons, you cannot install software which requires a Restart within a sandbox, including Windows Sandbox
  • Windows Sandbox is a fairly primitive VM and there is no persistence or other features one would normally associate with a full-blown VM. That said, for its purpose, Windows Sandbox is a very simple and user-friendly mechanism
  • During the initial run of Windows Sandbox, I received a warning message that Windows Defender was not enabled. You can safely ignore this warning, there is no need for Windows Defender to be running or any other antivirus software. During my online research I came across an editorial article where, in response to this message, the author had actually installed a third-party antivirus within Windows Sandbox. This, in my opinion, would be an extreme and unnecessary precaution. By its very nature, Windows Sandbox is designed to keep malware isolated away from the main system and any malware inadvertently picked up along the way is automatically expunged whenever Windows Sandbox is closed out
  • While no browser history will be saved locally, your ISP will still be able to see what sites you’ve visited
  • Windows Sandbox is currently utilizing the old Edge and, hopefully, Microsoft will update it soon to include the new Chromium Edge

There may be better sandboxing options available with more features and options. However, the one huge advantage with Windows Sandbox is that it is already there. Plus, as I have said earlier, its very simplicity contributes largely to its appeal.

13 thoughts on “Surf & Test Software Safely In Windows Sandbox”

  1. Hi Jim,

    Over many years you have posted information relating to Sandboxie and on every occasion the programme which could be difficult t navigate has been simplified for novices in a simplified, step by step manner.
    You have taken the time to simplify the step by step manner for those who want to use the Windows 10 Sandbox and I am sure that the people with whom I assist with computer maintenance, those who like to try new software, will appreciate me advising them to go to DCT to understand the use of Windows 10 Sandbox.
    I have been using Sandboxie for many years and now ‘tinkering’ off and on with the Windows product.

    Thank you,

    Jonno (not yet housebound ­čÖé

    1. Hey Jonno,

      Yes, Sandboxie is a neat bit of gear, but there is a learning curve, especially for less experienced users. Windows Sandbox is ideal in that regard, very simple and straightforward to use.

      Cheers mate… Jim

  2. I believe there is the option to save things to your computer when using Sandboxie.

    Can anything be saved when using Windows Sandbox or is it just for protection?

    1. Hey Robin,

      Yes, there is an option in Sandboxie to save data, called Quick Recovery. No, there is no such option with Windows Sandbox, no option to save anything. It’s one of the reasons I believe Windows Sandbox is perfect for less experienced users… along with its sheer simplicity.

      Cheers… Jim

  3. hi jim, i used sandboxie free for years and jumped on the pro version now for free. works great and you can have multiple sandboxes. i have one for google only so my gmail sits in it all isolated and feeling lonely along with my vpn. very easy to recover any downloaded files (movies, tv, stuff) in sandboxie. nice to know that msft is catching up but only available on Windows 10 Pro, Enterprise, or Server….doesnt include me, too bad. but with just a little effort, sandboxie is a great program and free, hard to beat.
    thanks again for an informative, well-written article. I can tell you got well past the 3rd grade (unlike some other writers…hahah)

    1. Hey Clas.

      Yes, Sandboxie is a great little program. Shame MS didn’t include Windows Sandbox in Windows 10 Home. Unfortunately, Windows Sandbox requires Hyper-V and that is not available in the Home edition.

  4. For years I have wanted to try Sandboxie but since I have only had Windows 10 Home version I could not give it a try.
    What is the best way to enable it on my PC, or must I upgrade my PC to Windows 10 Pro, Enterprise?

  5. Jim,

    Thanks for the great help in this matter.
    I am anxious to get it downloaded and installe.

    And the tutorial link was very much appreciated.

    Thanks to your help I can finally give Sandboxie a try.

    But most of all thanks for the GREAT website.

    Brian

  6. Jim, excellent article. I seem to be seeing, when running Windows Sandbox, that download speeds and overall response times seem to be much slower. Should that be the case?

    1. Hey Larry,

      Yes, that’s quite normal. You are running an operating system within an operating system and both are consuming/sharing resources. The level of impact is dependent on the host machine’s specs to start with. It wouldn’t be as noticeable on a PC running an Intel i7 CPU with 16GB RAM as it would on a PC running an Intel Pentium CPU with 4GB RAM, for example.

Leave a Reply to clas Cancel Reply

Your email address will not be published. Required fields are marked *

Scroll to Top

WHY NOT SUBSCRIBE TO OUR NEWSLETTER?

Get great content like this delivered to your inbox!

It's free, convenient, and delivered right to your inbox! We do not spam and we will not share your address. Period!