Quick Introduction to Windows Sandbox

John Savill explains when Windows Sandbox is useful and how it provides a fast, disposable isolated environment for running untrusted or one-off applications.

Overview

What Windows Sandbox is

• Windows Sandbox (often abbreviated WSB) provides a lightweight, temporary Windows environment designed for application isolation.
• It’s intended for scenarios like running an app or process you don’t fully trust, without impacting the host OS.

Installing Windows Sandbox

• The video walks through enabling/installing Windows Sandbox as a Windows feature.

Architecture (high level)

• Windows Sandbox uses virtualization-based isolation (commonly associated with Hyper-V-backed technology) to separate the sandboxed environment from the host.

Customizing the sandbox environment

• The video covers customizing the sandbox session, including using a Windows Sandbox configuration file (commonly a .wsb file) to control aspects of the environment.

Documentation and command line

• Reference documentation is provided for deeper configuration and command-line details:
  • Windows Sandbox documentation: https://learn.microsoft.com/windows/security/application-security/application-isolation/windows-sandbox/