How to Enable Windows Sandbox on Windows 11 and 10

To enable Windows Sandbox, make sure virtualization is turned on in your PC’s BIOS/UEFI, then open Turn Windows features on or off, check Windows Sandbox, click OK and restart. It works on Windows 11 and Windows 10 (version 1903 or later) Pro, Enterprise and Education editions, but not on Home. After a restart, launch it from the Start menu to get a clean, disposable copy of Windows that is wiped every time you close it.

What Windows Sandbox is

Windows Sandbox is a lightweight virtual machine built into Windows. Each time you open it, you get a fresh desktop that is isolated from your real system. Anything you install or download inside it is permanently discarded when you close the window. It uses Microsoft’s hypervisor technology, so it starts much faster than a full virtual machine and needs no separate Windows license or install image.

Requirements

These requirements come from Microsoft’s Windows Sandbox installation guide. Windows 10 reached end of support in October 2025, so if you are setting this up for security testing, Windows 11 is the better choice.

Step 1: Check that virtualization is on

1. Press Ctrl + Shift + Esc to open Task Manager.
2. Go to the Performance tab and select CPU.
3. Look for Virtualization: Enabled in the details below the graph.

If it says Disabled, restart the PC and enter the BIOS/UEFI setup (often by pressing F2, F10, F12 or Delete during startup, depending on the manufacturer). Look for a setting named Intel Virtualization Technology, VT-x, SVM Mode or AMD-V, enable it, save and exit. Change only that setting unless you know what the others do.

Step 2: Turn on Windows Sandbox

1. Click Start and type Turn Windows features on or off, then open it. (You can also press Windows key + R and run optionalfeatures.)
2. Scroll down and check Windows Sandbox.
3. Click OK and wait while Windows installs the components.
4. Click Restart now when prompted.

If the Windows Sandbox checkbox is missing or grayed out, your edition is Home, virtualization is off, or the PC does not meet the requirements.

Alternative: PowerShell

Open PowerShell as administrator and run:

Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online

Restart when it finishes.

Step 3: Launch and use it

1. Open Start, search for Windows Sandbox and run it (allow the admin prompt if one appears).
2. A window with a clean Windows desktop opens after a few seconds.
3. Copy a file from your real PC and paste it into the Sandbox window, or download it inside the Sandbox using Microsoft Edge.
4. Test the program or file.
5. Close the Sandbox window. Windows warns that everything will be deleted; confirm to discard it.

On Windows 11 24H2 and later, Sandbox is updated through the Microsoft Store and adds a settings menu (the “…” in the top-right corner) for options such as clipboard sharing, plus a wsb command-line tool. Microsoft notes that on 24H2, built-in Store apps like Calculator and Notepad are not available inside the Sandbox for now.

What Windows Sandbox is good for

• Trying unfamiliar software before installing it on your real system.
• Opening suspicious attachments or downloads in isolation.
• Testing settings or scripts without risking your main setup.
• Visiting a site you don’t fully trust in a throwaway browser session.

Sandbox reduces risk but is not a guarantee. By default it has network access and clipboard sharing, so malware could still reach your network or anything you paste. For known-malicious files, disable networking with a configuration file and never enter real passwords inside the Sandbox.

Customizing with a .wsb file

You can create a plain text file with the .wsb extension to control options such as networking, clipboard sharing, mapped folders and memory. For example, a file containing <Configuration><Networking>Disable</Networking></Configuration> launches a Sandbox with no internet access when you double-click it. Mapped folders can be set to read-only to protect your files.

Windows Home alternatives

Windows Sandbox is not officially supported on Home. Avoid scripts that claim to “unlock” it, since they modify system components and may break updates. Safer options:

• Upgrade to Pro: Settings > System > Activation > Upgrade your edition of Windows. Pricing varies; check the Microsoft Store.
• Use a free virtual machine app such as Oracle VirtualBox or VMware Workstation, with a legally licensed Windows install or a free evaluation image from Microsoft. You can take snapshots and roll back.
• Upload a suspicious file to an online scanner or your antivirus vendor instead of opening it.

Bottom line

If you have Windows 11 or 10 Pro, Enterprise or Education, enabling Windows Sandbox takes a few minutes: turn on virtualization, check Windows Sandbox in Windows Features and restart. It gives you a safe, disposable desktop for testing software. Before installing anything on your real PC, it also helps to check whether an app is safe. On Home edition, use a virtual machine or upgrade to Pro rather than unofficial workarounds.

FAQ

Does Windows Sandbox save anything?

No. Everything inside is deleted when you close the Sandbox window, so copy out any results you want to keep before closing it.

Why is Windows Sandbox grayed out?

Usually because virtualization is disabled in BIOS/UEFI, you are on Home edition, or the PC lacks enough cores or memory.

Is Windows Sandbox safe for running malware?

It isolates the system well for casual testing, but it is not a professional malware lab. Disable networking and clipboard sharing for risky files.

Do I need a separate Windows license?

No. Windows Sandbox is included in eligible editions and uses your existing Windows installation.