Creating Custom Windows Sandbox Configurations in Windows 10

[[correlate]]

Windows 10 May 2019 Update (version 1903) included a new feature called the Windows Sandbox that allows you to safely run applications in isolation from the rest of the operating system.
When you launch the Windows Sandbox
This means you can run untrusted software, scripts, malicious files and adware without the fear of impacting your normal Windows installation.
In order to make it more useful for users, Microsoft allows you to specify create configuration files that modify the functionality of the Sandbox.
In this guide we will explain how to create a configuration file and then use it to launch the Windows Sandbox.

Creating Custom Windows Sandbox Configurations in Windows 10

This article will teach you how to use configuration files to modify the behavior of the Windows Sandbox feature in Windows 10.

www.bleepingcomputer.com

 

[Tiamati]

Creating Custom Windows Sandbox Configurations in Windows 10

This article will teach you how to use configuration files to modify the behavior of the Windows Sandbox feature in Windows 10.

www.bleepingcomputer.com

What would be difference/advantages and disadvantages of using this Sandbox and not a virtualized machine through other ways?

 

[Protomartyr]

What would be difference/advantages and disadvantages of using this Sandbox and not a virtualized machine through other ways?

Windows Sandbox:

• Lightweight and easy to set up.
• You don't need a separate license key for Windows. It will generate a clean snapshot OS based on the host machine.
• Sandbox is only available for Windows Pro and Enterprise users.

Virtual Machines:

• You can use a different OS of your choosing.
• More customization options.

 

[ForgottenSeer 823865]

Like for many users, It is broken... at my end, no internet connection possible, known issue. So I can't evaluate it.

I hope with next upgrade it will work.

 

[Tiamati]

Windows Sandbox:

• Lightweight and easy to set up.
• You don't need a separate license key for Windows. It will generate a clean snapshot OS based on the host machine.
• Sandbox is only available for Windows Pro and Enterprise users.

Virtual Machines:

• You can use a different OS of your choosing.
• More customization options.

Tyvm! @Protomartyr

I was able to activate Windows sandbox and Application Guard (for Edge). There is any disadvantage in letting those options enabled (including BIOS virtualization activated) when not using them? Like slowing down Windows for example...

My sandbox showed some "problems" like:

1. i cant configure almost anything (like windows defender options for example)
2. Windows sandbox always delete everything on exit. I know that is how it is supposed to be, but it is a downside if you want to keep a constant sandbox for testing (malware testing for example)

 

[ForgottenSeer 823865]

You don't use a sandbox for malware testing, you use a dedicated real system on disposable machine that you format and restore from backup every time. At worst, a VM.

 

[notabot]

What would be difference/advantages and disadvantages of using this Sandbox and not a virtualized machine through other ways?

You don't use a sandbox for malware testing, you use a dedicated real system on disposable machine that you format and restore from backup every time. At worst, a VM.

The Windows Sandbox uses Intel vt-x virtualization, it is a VM.

 

[ForgottenSeer 823865]

The Windows Sandbox uses Intel vt-x virtualization, it is a VM.

yes i know, still not the best choice for malware testing.