How to Run Untrusted Software in Windows 10 Sandbox

Windows 10 Sandbox gives you a clean, disposable virtual environment to open suspicious files or install questionable programs without risking your main system. It uses hardware virtualization to create a lightweight, isolated desktop that resets to a pristine state every time you close it. This guide walks you through enabling the feature, launching it, and using it safely.

What You’ll Need

• Windows 10 Pro, Enterprise, or Education (the Sandbox is not available on Windows 10 Home)
• A 64-bit CPU with virtualization enabled (Intel VT-x or AMD-V) and SLAT (Second Level Address Translation)
• At least 4 GB of RAM (8 GB recommended), 1 GB of free disk space, and at least 2 CPU cores
• Administrator access to your PC to enable the feature

Step-by-Step

1. Check your Windows edition. Press Win + R, type winver, and press Enter. Confirm you’re on Pro, Enterprise, or Education. If you have Home, you’ll need to upgrade or use an alternative like VirtualBox.
2. Enable virtualization in BIOS/UEFI. Restart your computer and enter the BIOS/UEFI setup (usually by pressing Del, F2, or F10 during boot). Look for a setting named “Intel Virtualization Technology,” “AMD-V,” or “SVM Mode” and make sure it’s enabled. Save and exit.
3. Turn on the Sandbox feature. In Windows, open the Start menu, type “Windows Features,” and select “Turn Windows features on or off.” Scroll down, check the box next to “Windows Sandbox,” and click OK. Windows will install the necessary files and ask you to restart—do so.
4. Verify the Sandbox is available. After restarting, click the Start button and type “Windows Sandbox.” If it appears in the results, you’re ready. If not, re-check your virtualization settings or see the Troubleshooting section below.
5. Launch the Sandbox. Click the “Windows Sandbox” app. A new window will open with a fresh desktop that looks like a minimal version of Windows 10. This is your isolated environment.
6. Copy the untrusted file into the Sandbox. Use Ctrl + C on the file in your main system, then Ctrl + V inside the Sandbox window. Alternatively, drag and drop the file directly into the Sandbox window—this copies it into the virtual machine’s clipboard.
7. Run the software. Inside the Sandbox, double-click the file or install the program as you normally would. The Sandbox has its own isolated network connection, so internet access works, but any changes are confined to the virtual environment.
8. Inspect and test. Open the program, trigger its behavior, and see what it does. You can check for registry changes, file modifications, or network activity using tools like Process Monitor (download it inside the Sandbox) if you need deeper analysis.
9. Close the Sandbox. When you’re done, simply close the Sandbox window. A dialog will warn you that all contents will be discarded. Click “OK” to permanently delete everything—files, programs, and any malware—from your main system.

Common Mistakes

• Assuming the Sandbox is a full VM. It’s lightweight and shares your GPU, keyboard, and network. It does not provide the same isolation as a full hypervisor like Hyper-V or VirtualBox.
• Using it on Windows 10 Home. The feature simply won’t appear in Windows Features, and there’s no workaround without upgrading your edition.
• Forgetting to enable virtualization. If the Sandbox fails to start, the most common cause is that VT-x/AMD-V is disabled in BIOS.
• Dragging files instead of copying. Dragging a file from your host into the Sandbox copies it, but dragging a file from the Sandbox back to the host also copies it—so be careful not to drag anything out that you don’t want to keep.
• Expecting persistence. Any file you save inside the Sandbox is lost when you close it. If you need to keep a result, copy it out before closing.

Tips

• Use a dedicated folder. Create a folder inside the Sandbox for all your downloaded files so you can quickly find and delete them.
• Disable network access if you only need offline testing. You can block the Sandbox’s network by opening Network Connections inside the Sandbox and disabling the virtual adapter—this prevents malware from phoning home.
• Take snapshots (if you use a full VM). The Sandbox doesn’t support snapshots, but if you need to test multiple variations, consider using Hyper-V with a checkpoint instead.
• Monitor what it does. Use tools like Process Explorer or Wireshark (installed inside the Sandbox) to see what the software is doing.
• Keep Windows updated. Sandbox relies on the latest security patches, so make sure your host OS is up to date.

Troubleshooting

• Sandbox won’t start with an error about virtualization. Reboot into BIOS and confirm VT-x/AMD-V is enabled. Also check if Hyper-V is disabled—if you have Hyper-V on, you may need to turn it off or enable the “Windows Hypervisor Platform” feature instead.
• “Windows Sandbox” is missing from Windows Features. Your edition is likely Home. Upgrade to Pro or use an alternative like VirtualBox or VMware.
• Sandbox launches but shows a black screen. This can happen with older GPU drivers. Update your graphics drivers, and try disabling hardware acceleration in the Sandbox’s display settings (if accessible).
• File copy fails. Make sure the file is not open in another program. Also, the Sandbox clipboard works only for files and text—if you have a very large file, try compressing it first.
• Sandbox is extremely slow. Close other applications on the host to free RAM. If you have less than 8 GB, consider upgrading or using a lighter VM.
• Error 0x80070057 or similar. This often means the Sandbox service is not running. Open Services (services.msc), find “Windows Sandbox” and set it to Automatic, then restart.

Frequently Asked Questions

Is Windows Sandbox completely safe?

No. It’s a strong layer of isolation, but it’s not a security boundary. Malware designed to escape VMs could potentially break out, though that’s rare. For maximum safety, use it offline and don’t share sensitive files with the Sandbox.

Can I use Windows Sandbox on Windows 10 Home?

No, it’s only available on Pro, Enterprise, and Education. You could upgrade your edition or use a free alternative like VirtualBox.

Does the Sandbox have internet access?

Yes, by default it shares your host’s network connection. You can disable it by opening Network Connections inside the Sandbox and disabling the virtual adapter.

How do I transfer files from the Sandbox back to my main PC?

Copy the file inside the Sandbox (Ctrl+C) and paste it on your host (Ctrl+V). Or drag it out of the Sandbox window—this copies it to your host’s desktop. Remember that closing the Sandbox deletes everything inside.

Can I install software permanently in the Sandbox?

No. The Sandbox is ephemeral—every time you close it, all changes are discarded. If you need a persistent test environment, use a full VM like Hyper-V.

Why does my Sandbox show a black screen?

This is usually a GPU driver issue. Update your graphics driver, and if that doesn’t help, try disabling hardware acceleration in the Sandbox’s display settings (if you can access them).

Related

• How to Disconnect Windows 10 From a Domain
• Install iPhone Notes App on Windows 10: Full Guide
• Solve WiFi Cellular Network Connection Problem