Windows Sandbox requires a supported Windows edition, hardware virtualization, and at least 4 GB of RAM, 1 GB of free disk space, and two CPU cores. It is not supported on Windows Home. Before using it to inspect unfamiliar files, account for its defaults: networking and clipboard sharing are on, and closing the sandbox deletes its contents.
Windows Sandbox requirements
Microsoft supports Windows Sandbox on Windows 10 version 1903 or later and Windows 11, but only on specific editions. The machine must also meet the processor, virtualization, memory, and storage prerequisites below. These are Microsoft’s published requirements, not a guarantee that every workload will run smoothly.
| Requirement | Microsoft’s stated baseline or recommendation |
|---|---|
| Windows version | Windows 10 version 1903 or later, or Windows 11 |
| Windows edition | Pro, Enterprise, Pro Education/SE, or Education; Windows Home is unsupported |
| Processor architecture | AMD64, or Arm64 on Windows 11 version 22H2 and later |
| Virtualization | Enabled in BIOS/UEFI on a physical PC; nested virtualization enabled when Windows runs in a virtual machine |
| Memory | At least 4 GB; 8 GB recommended |
| Free disk space | At least 1 GB; an SSD is recommended |
| CPU cores | At least two; four cores with hyper-threading recommended |
Requirements and supported editions are documented in Microsoft’s Windows Sandbox overview and installation guidance. In a managed organization, an administrator may disable the feature or enforce settings through Group Policy.
How to enable Windows Sandbox
- Check the edition and version: Open Settings > System > About and confirm the PC runs a supported Windows edition and version. Windows Home cannot enable the supported feature.
- Enable virtualization: On a physical PC, enable CPU virtualization in BIOS/UEFI. The precise setting name varies by manufacturer. If Windows itself is running in a virtual machine, the outer hypervisor must provide nested virtualization.
- Turn on the optional feature: Search Windows for Turn Windows features on or off, select Windows Sandbox, and choose OK. Restart if Windows prompts you.
Alternatively, Microsoft documents this PowerShell command, run in an elevated session: Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online. The same installation page lists both approaches.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Default settings and security boundaries
Windows Sandbox is an isolated, temporary Windows desktop, but it is not a guarantee that every interaction with the host is blocked. Microsoft says networking is enabled by default through the Hyper-V default switch, as is clipboard redirection. Audio input is enabled; video input and printer redirection are disabled. Virtualized GPU is enabled by default on non-Arm64 devices. A default launch has a maximum memory capacity of 4 GB; that default is distinct from the 8 GB system-memory recommendation.
Microsoft cautions: “Enabling networking can expose untrusted applications to the internal network.” A suspicious application could use that connection to reach network resources. Clipboard redirection also creates a channel between the host and sandbox, so avoid copying sensitive material into an untrusted session.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Use a .wsb configuration for untrusted files
A .wsb file is an XML configuration file that can control networking, virtual GPU, memory, mapped host folders, startup commands, audio and video input, printer redirection, clipboard redirection, and Protected Client. For a file you do not trust, Microsoft recommends disabling networking and mapping only the folder needed, as read-only. Enabling virtual GPU can increase the attack surface.
Mapped folders deserve special care: sandboxed software may affect files in folders exposed to it, and changes written to a writable mapped folder remain on the host after the session ends. Read-only mapping prevents writes through that mapping, but it does not make other enabled sharing channels disappear.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
What Windows Sandbox does not preserve or support
Closing it deletes the session
Closing Windows Sandbox removes its installed software, files, and other session state; the next launch starts fresh. On Windows 11 version 22H2 and later, a restart initiated inside Sandbox can retain state across that restart, but closing the Sandbox still disposes of it.
It runs the host’s Windows build
Sandbox uses the same Windows build as its host. It is therefore not a way to test a different Windows release or build. Only one Sandbox instance can run at a time.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Some built-in apps and optional features are unavailable
Microsoft’s FAQ says inbox apps such as Store and Notepad, and Windows Optional Features enabled through Turn Windows features on or off, are unsupported inside Sandbox. Store apps can be installed if you already have an .appx package, but the Store app is not available there for direct downloads. Microsoft’s Windows 11 version 24H2 installation note specifically says inbox Calculator, Photos, Notepad, and Terminal are unavailable in Sandbox.
The newer Sandbox app depends on updates
Starting with Windows 11 version 24H2, a newer app delivered through Microsoft Store adds runtime controls for clipboard, audio/video input, and folder sharing, plus early command-line support. Microsoft lists Windows 11 24H2 with KB10D or later, internet access to Microsoft Store and Windows Update, and an existing Sandbox installation as prerequisites for upgrading. Availability depends on version and updates; see Microsoft’s overview and installation notes.
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Windows Sandbox or a full virtual machine?
Choose based on whether you need a quick disposable test or a separate environment that can keep changes. Microsoft describes Sandbox as simpler and more resource-efficient for temporary tests; a Hyper-V virtual machine requires more setup and dedicated resources but can retain changes unless reverted.
| Need | Better fit | Why |
|---|---|---|
| Short-lived test, then discard everything | Windows Sandbox | Quick to open, uses host Windows files, and disposes of session state when closed |
| Persistent files or installed software | Full VM | Changes can remain between sessions unless you revert the VM |
| Test a different Windows version or build | Full VM | Sandbox uses the host’s Windows build |
| Keep a test environment running alongside another Sandbox | Full VM | Only one Sandbox instance can run at a time |
Microsoft’s comparison of the two options is in its Windows Sandbox overview.
Why Windows Sandbox is missing or will not start
- The feature is missing: Verify the Windows edition, Windows version, and processor architecture against the requirements above. Check that Windows Sandbox is enabled under Turn Windows features on or off.
- Virtualization errors: Confirm virtualization is enabled in BIOS/UEFI. If Windows runs inside a VM, confirm nested virtualization is enabled. For “No hypervisor was found,” Microsoft says Sandbox supports only the Hyper-V Hypervisor; third-party hypervisors are unsupported.
- A .wsb configuration fails: Check that file paths exist and that the XML is valid. Review any configuration errors against Microsoft’s configuration documentation.
- A setting cannot be changed: Group Policy may enforce settings on a managed PC; ask the administrator whether the feature or configuration is controlled centrally.
- The newer app does not install: Check the Windows 11 24H2 and KB10D-or-later requirement, ensure Sandbox is already installed, and verify access to Microsoft Store, Windows Update, and the internet.
Microsoft’s installation FAQ and troubleshooting guidance are available in the installation documentation and overview.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
