Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Windows Sandbox is a useful first screen for an unfamiliar PC game, not a safety certificate. It creates a disposable Windows environment using hardware-based virtualization, so the installation and its changes disappear when you close the window. A game can still fail to install, be blocked by its launcher or anti-cheat, run badly, or make risky network and account requests. For the safest useful test, start with networking and clipboard sharing disabled, avoid host-folder mapping, and enable a mapped folder only when you need to transfer a file.
What Windows Sandbox can—and cannot—tell you
Microsoft Learn describes Windows Sandbox as “a lightweight desktop environment to safely run untrusted Win32 applications in isolation.” The important word is isolation: Sandbox separates the guest session from your everyday Windows installation, but it does not certify that an application is benign or guarantee that a particular game will work.
As an Amazon Associate I earn from qualifying purchases.
Sandbox uses hardware-based virtualization and is disposable. Installers, game files, configuration changes and other state inside the session are deleted when you close Sandbox. That makes it practical for a clean, repeatable trial: each new session starts from the Windows image again. It also means you must reinstall or reconfigure the game every time you close the session.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Sandbox behavior | What it means for a game test |
|---|---|
| Hardware-based virtualization | The game runs in a virtualized Windows environment rather than directly in your normal installation. |
| Contents deleted when Sandbox closes | Installed games, launchers and settings do not persist between sessions. |
| Networking enabled by default | The guest can reach the network unless you disable networking in the configuration. |
| Clipboard sharing enabled by default | Copy and paste can provide a convenient path between the guest and host, but also increases the boundary crossing. |
| Virtual GPU enabled by default on non-Arm64 devices | Graphics tests are more representative, although the virtual graphics device adds another exposed component. |
| Same Windows build as the host | Sandbox is not an independently maintained older operating system; host build compatibility still matters. |
| Microsoft Store app unavailable | A game distributed only through the Store may not install through the normal Store workflow. Microsoft notes that an app package can be installed directly, but that does not make every packaged game compatible. |
Default convenience features are also the main security trade-offs. Networking can expose the guest application to your internal network, clipboard redirection can move data across the boundary, and a mapped host folder can let software read or alter host data. A successful launch therefore answers only “this title starts in this particular virtual environment”; it does not prove that the files are harmless.
#1 Best Overall
- System: AMD Ryzen 5 5500 3.6GHz 6 Cores | AMD B550 Chipset | 8GB DDR4 | 500GB PCIe 4.0 NVMe SSD | Windows 11 Home
- Graphics: AMD Radeon RX 6500 XT 4GB Graphics | 1x HDMI | 1x DisplayPort
- Connectivity: 4 x USB-A 3.2 | 4 x USB-A 2.0 | 1 x LAN | WiFi 5 | Bluetooth 5.0 | 7.1 Channel Audio
- Tempered Side Case Panel | Custom RGB Lighting | Keyboard and Mouse
- 1 Year Parts & Labor Warranty, Free Lifetime Tech Support
Check virtualization before creating the test
Windows Sandbox depends on virtualization support. Microsoft Support provides separate Windows 10 and Windows 11 instructions for enabling it, and the exact UEFI or BIOS wording varies by device manufacturer.
- Check your manufacturer’s documentation. Find the procedure for entering UEFI or BIOS on your computer and identify the hardware-virtualization setting. It may be named differently on Intel- and AMD-based systems.
- Enable hardware virtualization in UEFI or BIOS. Change only the virtualization setting you need, save the firmware changes, and restart Windows. Do not alter unrelated boot or security settings just to experiment.
- Turn on Virtual Machine Platform in Windows. Open the Windows optional-features dialog (“Turn Windows features on or off”), select Virtual Machine Platform, apply the change, and restart if Windows requests it.
- Open Windows Sandbox after the restart. If Sandbox still cannot start, return to the UEFI/BIOS documentation and the Windows optional-features list rather than repeatedly reinstalling the game.
These steps establish that the computer can host Sandbox; they do not establish that a game, launcher or anti-cheat system supports virtualization. A game can be incompatible even when Sandbox itself opens normally.
Choose an isolation profile before transferring the installer
Use the most restrictive configuration that still lets you answer your question. For an unknown installer, the starting point should be no network, no clipboard, no host-folder mapping and Protected Client mode enabled. If you need to evaluate graphics performance or sign in to a service, make that a deliberate second test rather than silently accepting all defaults.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsSecurity-first configuration
Create a text file with a .wsb extension, for example Game-security-test.wsb, and open it with this configuration:
<Configuration>
<Networking>Disable</Networking>
<ClipboardRedirection>Disable</ClipboardRedirection>
<ProtectedClient>Enable</ProtectedClient>
<VGpu>Disable</VGpu>
</Configuration>This profile removes network access and clipboard transfer, adds the AppContainer boundary provided by Protected Client mode, and disables the virtual GPU. Disabling vGPU reduces the virtual graphics attack surface, but it switches the guest to software rendering. A demanding game may then fail to launch or perform so slowly that the result says more about software rendering than about the game.
Compatibility-oriented graphics configuration
When the security-first profile reaches the point where you need a meaningful graphics check, make a separate configuration rather than editing your only copy:
<Configuration>
<Networking>Disable</Networking>
<ClipboardRedirection>Disable</ClipboardRedirection>
<ProtectedClient>Enable</ProtectedClient>
<VGpu>Enable</VGpu>
</Configuration>On non-Arm64 devices, vGPU is enabled by default, but stating it explicitly makes the test reproducible. Keep networking disabled unless the game cannot reach its launcher or account service without it. If you enable networking for a second run, treat that run as a higher-exposure test and do not browse unrelated sites or open personal files in the same session.
Rank #2
- 8-Core 16-Thread Processing Power – Powered by the Ryzen 7 4700LE processor with Zen 2 architecture, delivering 8 cores and 16 threads with a boost clock up to 4.2GHz. Effortlessly handle multitasking, streaming, content creation, and demanding applications simultaneously without slowdowns.
- GeForce RTX 3050 8GB Graphics – Equipped with 8GB GDDR6 dedicated VRAM and real-time ray tracing support. Experience smooth 1080p gaming at 55-60 FPS in AAA titles like Cyberpunk 2077, 70+ FPS in Fortnite, and 90-100 FPS in Apex Legends with DLSS enabled. The 8GB buffer handles modern game textures comfortably – a step above 6GB variants
- High-Speed Memory & Storage – Paired with 16GB of DDR4 3200MHz dual-channel RAM (16GB), the PC ensures responsive multitasking—whether streaming while gaming or editing videos. It also includes a 512 GB NVMe M.2 SSD for lightning-fast boot times, quick game loads, and ample storage for your game library, creative projects, and files.
- Next-Gen WiFi 6 Connectivity – Stay connected with the latest WiFi 6 technology for faster speeds, lower latency, and improved network efficiency. Whether you're gaming online, streaming 4K content, or joining video conferences, enjoy stable, high-speed wireless connectivity.
- Ready-to-Use Value Desktop – Pre-built and ready to go right out of the box. Perfect for gamers, students, content creators, and home office users seeking reliable performance without the hassle of building a PC themselves. The mature AM4 platform with DDR4 memory offers excellent value and proven stability.
Transferring a file without exposing a whole drive
The safest transfer method is to avoid mapped folders entirely and use an installer already available through a controlled, trusted method inside the guest. If a host-to-guest transfer is necessary, map only a dedicated folder containing the installer and make it read-only. Do not map your Downloads, Documents, game-library root or an entire drive.
<Configuration>
<Networking>Disable</Networking>
<ClipboardRedirection>Disable</ClipboardRedirection>
<ProtectedClient>Enable</ProtectedClient>
<VGpu>Enable</VGpu>
<MappedFolders>
<MappedFolder>
<HostFolder>C:SandboxGameDrop</HostFolder>
<SandboxFolder>C:UsersWDAGUtilityAccountDesktopGameDrop</SandboxFolder>
<ReadOnly>true</ReadOnly>
</MappedFolder>
</MappedFolders>
</Configuration>Replace the host path with a real, dedicated folder on your computer. A read-only mapping prevents ordinary writes through that mapping, but the contents are still visible to software running in the guest. Remove the entire MappedFolders block when no transfer is required. Protected Client mode can restrict copy and paste, so a mapped folder is preferable to enabling clipboard sharing merely to move one installer.
Prepare a game test that answers a specific question
Decide what “runs safely” means for your case. There are at least three separate questions:
- Installation: Can the launcher or installer operate in the guest?
- Execution: Does the game start with its graphics, runtime components and anti-cheat system?
- Exposure: Can you complete the test without granting unnecessary network access, host-file access or personal account access?
Obtain the installer from the publisher or another source you already trust. Sandbox is not a substitute for checking provenance. If the game requires an online account, consider whether a separate test account is appropriate under that service’s rules; never assume that entering your primary credentials into an unknown executable is harmless merely because it is inside a virtual machine.
Put only the files needed for the trial in the dedicated transfer folder. Close unrelated applications on the host, especially anything containing sensitive documents or credentials. If the game needs a launcher download, authentication or an update, plan a separate network-enabled run and record exactly what the launcher requests.
Run the game in two controlled passes
Pass one: install and launch offline
- Start the security-first
.wsbfile. Wait for the clean Windows desktop. - Verify the transfer boundary. If you used a read-only mapping, open only the mapped folder and copy the installer into the guest’s temporary working area. Do not add other host folders.
- Install to the guest. Choose a location inside the Sandbox environment. Do not point the installer at a host path or an existing game library.
- Observe the installer’s behavior. Note requests for administrator approval, unexpected bundled software, access to personal locations, or a requirement for an online service. A refusal to install is a compatibility result, not proof of maliciousness.
- Launch without networking. Record whether the launcher opens, whether the game reaches its menu, and whether an anti-cheat component stops execution.
- Exercise only low-risk functions. Check menus, graphics initialization and a local or offline mode if available. Do not open personal files or paste secrets into the guest.
Pass two: only the access the game demonstrably needs
- Close the first session. This deletes the installation and returns you to a clean starting point.
- Create a second configuration. Keep clipboard sharing disabled and host mappings absent or read-only. Enable networking only if the launcher or title cannot be evaluated without it.
- Run the same installer again. Because Sandbox is disposable, this reinstall is expected.
- Sign in only when necessary. Treat account prompts, permissions and unusual connection destinations as security decisions, not as routine steps.
- Compare the result with the offline pass. A title that works only with networking has a different exposure profile from one that runs entirely offline.
Close Sandbox from its window when finished. Do not expect the installed game, save files or configuration to survive. If you need a record, write observations on the host after the session ends rather than copying personal notes into the guest through an enabled clipboard.
Interpret the result without overstating it
| Observed result | What it establishes | What it does not establish |
|---|---|---|
| The installer completes and the game reaches its menu offline | The title can install and start in that Sandbox configuration. | It does not prove the executable is benign or that every feature is safe. |
| The launcher refuses to install | The distribution method or launcher is incompatible with the guest, or it requires a service unavailable there. | It does not prove the game is malicious. |
| The game starts only with vGPU enabled | The title depends on virtual graphics support for a usable session. | It does not show how the game performs on your physical GPU. |
| The game fails with vGPU disabled | Software rendering is insufficient for this title or its launcher. | It does not distinguish a graphics limitation from an anti-cheat or launcher failure. |
| An anti-cheat component blocks launch | The security software does not accept this virtualized environment, or another requirement is unmet. | It does not show that the title would fail on a normal, supported Windows installation. |
| The title requires networking or account sign-in | A meaningful test needs a network-enabled second pass and possibly service authentication. | It does not make the network-enabled configuration equivalent to the offline, lower-exposure test. |
| The session closes and all files disappear | Sandbox’s disposable behavior is working as designed. | It does not provide a way to recover unsaved game data from the guest. |
Anti-cheat, Secure Boot and TPM can decide compatibility
Game compatibility is title-specific. Some games or their anti-cheat systems require Secure Boot and TPM 2.0. Steam Support’s “Secure Boot & TPM 2.0” guidance is an official example of those requirements, not evidence that every game has them or that satisfying them makes Sandbox compatible.
Rank #3
- POWERHOUSE 8-CORE GAMING PERFORMANCE — Driven by the AMD Ryzen 7 8700F with 8 cores and 16 threads, boosting up to 5.0 GHz for smooth, responsive gameplay and the ability to handle AAA titles, streaming, and background tasks all at once
- NEXT-GEN BLACKWELL ARCHITECTURE — The NVIDIA GeForce RTX 5070 is powered by NVIDIA's cutting-edge Blackwell GPU architecture, delivering a massive generational leap in rasterization and ray tracing performance so you can experience your games the way they were meant to be played.
- Simplistic Design: Enjoy the latest generation of Windows 11 Home for your everyday needs. *MSI recommends Windows 11 Pro for business use.
- Cool While Gaming: In conjunction with an ARGB fan Air Cooler, the Codex R2 features four system cooling fans; three in the front and one in the rear to pull in cool air and push heat out of the PC.
- Turn on the Bright Lights: With the built-in RGB lighting, take your gaming experience to the next level by pressing the MSI LED button to cycle through lighting options. Customize lighting even further with MSI Center software.
Sandbox runs the same Windows build as its host, but a launcher can still detect virtualization, reject the guest’s security state, or depend on a driver that cannot be installed in the disposable environment. Check the publisher’s current system requirements and anti-cheat support guidance for the exact game and version. If the publisher does not support virtual machines, treat a Sandbox failure as an unsupported test environment rather than a verdict on the game’s safety.
Graphics testing: security versus realism
Virtual GPU settings change both the attack surface and the usefulness of a game test. With vGPU disabled, Windows uses software rendering, which may be slower and can make a game fail even though it would run on your physical GPU. With vGPU enabled, a graphics-heavy title has a better chance of reaching its normal rendering path, but the test still is not a benchmark of your host hardware.
Use vGPU disabled when your primary question is whether an untrusted installer can be opened with the smallest practical graphics surface. Use vGPU enabled when you need to determine whether the game can initialize its graphics stack, and label that result as a compatibility check rather than a performance guarantee. Do not infer frame rates, stability or hardware requirements from a Sandbox session.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Network, clipboard and mapped-folder decisions
Networking
Networking is enabled by default. That makes launchers and online games easier to test, but it also lets software in the guest reach the network, including the internal network to which the host is connected. Disable networking for an unknown installer. If online access is essential, enable it only in a separate session after deciding what account and network exposure you accept.
Clipboard
Clipboard sharing is enabled by default. Disable it when testing an unknown executable, especially if the host clipboard may contain passwords, tokens, recovery codes or confidential text. Protected Client mode can restrict copy and paste, so a deliberate read-only folder is a better transfer mechanism when you need one file.
Free tools Windows power users keep installed
One-click scans. No signup required.
Mapped folders
Do not map host folders unless the game installer needs a file from them. A mapped folder can expose host data and, if configured writable, allow changes to that data. Use a newly created staging folder and set the mapping read-only. Remove the mapping from later sessions when it is no longer needed.
Protected Client mode
Protected Client mode adds an AppContainer isolation boundary. It can restrict convenience features such as copy and paste, which is an intentional trade-off: fewer easy transfer paths in exchange for stronger isolation. Test the game first with this mode enabled; relax it only when a documented compatibility problem requires the change.
Rank #4
- POWERED BY RTX 5070 12GB + RYZEN 7 9700X - The GeForce RTX 5070 12GB GDDR7 graphics card pairs with an 8-core AMD Ryzen 7 9700X processor to drive smooth 1440p and 4K gameplay, giving this gaming PC the headroom for modern titles, streaming, and creative work.
- 32GB DDR5 6000MHz MEMORY & 1TB NVMe SSD - 32GB of high-speed DDR5 memory and a 1TB PCIe 4.0 NVMe solid state drive deliver quick load times, smooth multitasking, and generous storage, keeping this prebuilt gaming desktop responsive under heavy workloads.
- BUILT-IN 11.3-INCH Smart DISPLAY - An integrated smart screen shows real-time CPU and GPU temperatures, usage, and weather while you play, adding a distinctive and functional touch to your battlestation.
- 850W 80+ GOLD POWER SUPPLY, 360MM LIQUID COOLING & WiFi 7 - An 850W 80 Plus Gold certified power supply provides stable, efficient power with headroom for future upgrades, while a 360mm AIO liquid cooler, WiFi 7, and an ARGB mid-tower case keep the Ryzen 7 CPU cool and connected in a clean build.
- READY TO PLAY OUT OF THE BOX - Arrives fully assembled and tested with Windows 11 Home pre-installed, so your prebuilt gaming computer is ready to set up in minutes. Assembled in the USA, and backed by a one-year limited warranty and lifetime free technical support.
Troubleshoot by symptom
Sandbox will not start
Return to the virtualization prerequisites. Confirm that hardware virtualization is enabled in UEFI or BIOS and that Virtual Machine Platform is selected in Windows optional features. Follow the device maker’s firmware instructions for the exact setting name. Changing unrelated firmware options is not a useful troubleshooting step.
The installer or launcher is unavailable
Windows Sandbox does not provide the Microsoft Store app. If the game is delivered through the Store, the normal Store installation path will not be available in the guest. Microsoft notes that an app package can be installed directly, but a direct package install is not a general guarantee that the launcher or game will work in Sandbox.
The game installs but will not launch
Separate launcher failure, anti-cheat rejection and graphics initialization. Try the same title in the offline profile and the compatibility-oriented vGPU profile, changing one variable at a time. Then check the publisher’s requirements for virtualization, Secure Boot, TPM 2.0 and any named anti-cheat system.
The game shows a black screen or unusably low performance
Check whether vGPU was disabled. Software rendering can be substantially slower and can make the result unrepresentative. Re-run with vGPU enabled while keeping networking and host-folder access restricted, then treat the outcome as a launch-compatibility observation rather than a performance measurement.
The game needs a file from the host
Do not re-enable unrestricted clipboard sharing or map an entire drive. Put only the required file in a dedicated host folder and map that folder read-only. If Protected Client mode prevents the needed transfer, decide whether the file is important enough to justify a narrowly scoped configuration change.
The game loses all progress after closing
That is expected. Sandbox contents are deleted when the session closes. Save any non-sensitive observations on the host after the test and plan to reinstall the game for every new run.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteA practical decision checklist
- Can the computer run Windows Sandbox after hardware virtualization and Virtual Machine Platform are enabled?
- Can the installer be obtained from a source you trust without exposing personal files?
- Does the first run work with networking, clipboard sharing and host-folder mapping disabled?
- Does the launcher require the Microsoft Store, an online account or a service that is unavailable in Sandbox?
- Does the anti-cheat system permit virtualization and meet its Secure Boot or TPM 2.0 requirements?
- Was vGPU enabled or disabled, and could that choice explain a launch or performance failure?
- Can you accept reinstalling the game after every session?
If the answers support an offline, restricted run, Sandbox is a sensible way to observe the installer and basic launch behavior without leaving changes on your everyday Windows installation. If the title needs unrestricted networking, personal credentials, writable host folders or an unsupported anti-cheat driver, the test no longer provides the same isolation benefit and its result should be described as “inconclusive in Sandbox,” not “safe.”
What the official guidance covers
Microsoft Learn’s “Use and configure Windows Sandbox” page, updated March 29, 2026, documents the configuration options and default behaviors discussed here. Microsoft Learn’s “Windows 11 Security Book – Application Isolation,” updated November 18, 2025, explains the application-isolation model. Microsoft Support’s “Enable Virtualization on Windows,” accessed October 13, 2026, covers the Windows 10 and Windows 11 virtualization steps. Steam Support’s “Secure Boot & TPM 2.0,” accessed October 13, 2026, illustrates why a particular game’s platform requirements must be checked separately.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
