1. TechSpot is dedicated to computer enthusiasts and power users. Ask a question and give support. Join the community here.
    TechSpot is dedicated to computer enthusiasts and power users.
    Ask a question and give support.
    Join the community here, it only takes a minute.
    Dismiss Notice

Microsoft's Windows Sandbox lets you run suspicious apps in isolation

By midian182 · 15 replies
Dec 19, 2018
Post New Reply
  1. Microsoft said the feature, which was previously known as InPrivate Desktop, would arrive in Windows 10 19H1 by early next year and be part of the Windows 10 Pro and Enterprise editions. Any software its runs stays only in the sandbox. Once it is closed, all the software and its files and state are permanently deleted.

    While the feature doesn’t require the setting up of a virtual machine, virtualization capabilities need to be enabled in the BIOS. Users must also have at least 1GB of free disk space to run the sandbox.

    The sandbox builds on technologies used within Windows Containers, which were designed to run in the cloud. Microsoft integrated this within Windows 10, adding features that made it more suitable for running on devices and laptops.

    “One of the key enhancements we have made for Windows Sandbox is the ability to use a copy of the Windows 10 installed on your computer, instead of downloading a new VHD image as you would have to do with an ordinary virtual machine,” explains the company.

    The sandbox also uses a new technology called “integrated scheduler,” which allows the host to decide when the sandbox runs.

    Windows 10 Pro and Enterprise users will be able to try out the feature once Microsoft ships build 18305.

    Full prerequisites:

    • Windows 10 Pro or Enterprise build 18305 or later
    • AMD64 architecture
    • Virtualization capabilities enabled in BIOS
    • At least 4GB of RAM (8GB recommended)
    • At least 1 GB of free disk space (SSD recommended)
    • At least 2 CPU cores (4 cores with hyperthreading recommended)

    Permalink to story.

     
    Last edited by a moderator: Dec 19, 2018
  2. Plutoisaplanet

    Plutoisaplanet TS Booster Posts: 73   +58

    The primary purpose of the feature (at least for me) will be to multiclient games that try to prevent you from doing so.
     
    Reehahs likes this.
  3. OneDayBefore

    OneDayBefore TS Rookie

    HA HA! This is their attempt at increasing Edge usage! No one will use this and then download, and install, a browser when they will have to do the same thing the next time they use it.
     
  4. IAMTHESTIG

    IAMTHESTIG TS Evangelist Posts: 1,664   +753

    There is this suspicious and really old app that comes with Windows 10, but I think Microsoft forgot about it; named "mmc.exe". I think I'll run that in sandbox mode.
     
  5. Silvernine

    Silvernine TS Enthusiast Posts: 43   +35

    This had nothing to do with Edge. If it's related to Edge and they wanted to use it improve Edge users, it would not be limited to Pro and Enterprise users only. This is seemingly based on their Hyper-V technology that isn't even available for Home users.
     
    OortCloud likes this.
  6. Thatsssfuego

    Thatsssfuego TS Rookie

    I was thinking about Diablo 2 as I read the article then lol'd when I read this first comment.
     
    Reehahs likes this.
  7. LeroN

    LeroN TS Enthusiast Posts: 84   +27

    It's nothing new. There is such application for W7/10.
     
  8. cliffordcooley

    cliffordcooley TS Guardian Fighter Posts: 11,208   +4,876

    Which is where it should have stayed. We don't need yet another application bundled in the OS. Windows 10 is bloated way too much as it is.
     
    wiyosaya likes this.
  9. Silvernine

    Silvernine TS Enthusiast Posts: 43   +35

    Reading more into it, apparently it's not bundled or turned on by default. You will have to manually open up "Windows Features," check it, let it download, and then it will be installed. So doesn't seem too bad. Anyways, as far as I am concerned, most power uses seem to be excited about this feature. So I don't see that being a bad thing as it is useful and having it built-in rather than relying on Sandboxie ($20 per license and cannot be use for commercial) is neat as well.
     
    Eldritch likes this.
  10. cliffordcooley

    cliffordcooley TS Guardian Fighter Posts: 11,208   +4,876

    Everything available through Windows Features is stored on your local drive waiting to be installed. I don't like it and never have but that is the way it is.

    Used to, you could install and leave features to be installed on demand. And if you ever wanted those feature turned on. You needed the install disk because that is where the install files were stored. Now the install files are all extracted to disk and then installed from that location. So whether you want those features or not, the install files are still stored on disk.

    Microsoft does the same for hardware drivers and not just one version. They store every version of driver ever installed in a driver repository. When your driver is a couple hundred Megbyte in size. A half dozen driver updates will take over a Terabyte in driver storage. This is storage for installing drivers not usage.
     
  11. Silvernine

    Silvernine TS Enthusiast Posts: 43   +35

    It is my most heavily used program on XP and W7. However, by the time 10 came around, I noticed a lot of things no longer work quite properly. I have encounter quite a few small programs that just refused to run in it even with a sandbox with default settings. It doesn't help that Invincea does not work on it as often as the old developer did. Hell, it currently has does not play well with Windows 10 1809 but at the very least, a beta recently came out to get it back up to par in the forums. Therefore, I don't think that it's the go to these days for reliable sandboxing.

    On the other hand, it's still one of my purchases that I never regret. I have the lifetime license as well.
     
  12. dogofwars

    dogofwars TS Addict Posts: 161   +63

    Good for banking etc..
     
    OortCloud likes this.
  13. Eldritch

    Eldritch TS Addict Posts: 110   +106

    Some unfounded negativity is there in the comments. Its an nice addition and will lead to more mainstream usage of Sanboxing. Those who dont like can always use Sandboxie?
    Same criticism was there for and to some extent, still is, for Windows Defender. While you can say that Defender can not stand against likes of Bitdefender and Kaspersky but its pretty solid now and is significantly better than no AV or some off market AVs made by small manufacturers.
    All in all, its an welcome addition and the doom and gloom is unjustified.
     
  14. Ben Myers

    Ben Myers TS Enthusiast Posts: 72   +21

    But can you run Windows itself in a sandbox??? What about Microsoft's reviled Edge browser or its successor, whatever it may be called? No joke! Sandbox the browser!
     
  15. OortCloud

    OortCloud TS Maniac Posts: 222   +100

    I agree a really useful feature. I never got on with SandBoxie so use a VirtualBox with an old XP license. Its really useful when you want to try something out or are not sure about the authenticity of something, or if you want to run something just once then throw away. So to have it running the same Win10 as the host using the same license sounds great.
     
  16. LeroN

    LeroN TS Enthusiast Posts: 84   +27

    Today's morning I got another update for my W10Pro and it asked me to uninstall Sandboxie with no choice otherwise it didn't process updating.
     

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...