If you occasionally need to run a suspicious executable file downloaded from the internet, or want to test a questionable piece of software without risking your primary operating system, your traditional options were limited. You either had to hope your antivirus caught any malware, or you had to spend hours setting up a complex, resource-heavy Virtual Machine using Hyper-V or VirtualBox.
Windows 11 Pro and Enterprise editions include a brilliant, built-in solution called “Windows Sandbox.” It is a lightweight, disposable desktop environment tailored for safely running applications in isolation. When you close the Sandbox, everything inside it—the software, the files, and any potential malware—is instantly and permanently deleted, leaving your host machine completely untouched. However, this feature is disabled by default.
How to Enable Windows Sandbox in Windows 11
You must enable Sandbox through the optional Windows Features menu. Note: This requires Windows 11 Pro, Enterprise, or Education. It is not available on Windows 11 Home. Furthermore, virtualization must be enabled in your motherboard’s BIOS/UEFI.
- Click the Start button, type Windows Features, and select the control panel result labelled Turn Windows features on or off.
- The “Windows Features” dialog box will appear. Scroll down the list until you find Windows Sandbox.
- Check the box next to Windows Sandbox.
- Click OK. Windows will spend a few moments downloading and installing the necessary lightweight virtualization files.
- Once the installation is complete, click the Restart now button to reboot your computer.
After your PC restarts, open your Start menu and search for Windows Sandbox. Launching it will open a window containing a clean, pristine instance of Windows 11. You can freely copy and paste suspicious files from your main desktop into the Sandbox window, run them safely, and simply close the Sandbox window when you are done to instantly obliterate the environment.