Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

No: Microsoft has not announced a product called “Pornbox.” The headline is a joke; the real subject is Windows Sandbox, an existing Windows feature that runs a temporary, isolated Windows desktop. What is newer is a Store-updatable Sandbox client for eligible Windows 11 version 24H2 systems—not a brand-new product launching soon.

What Windows Sandbox does

Windows Sandbox creates a lightweight Windows environment using virtualization. It is useful for briefly testing unfamiliar software, opening a questionable file, checking a risky website, reproducing a bug, or trying a system utility without installing it directly on your everyday Windows setup. Microsoft describes the environment and its disposable behavior in its Windows Sandbox overview.

When you close the Sandbox, applications and files created inside it and changes made to its environment are deleted. On Windows 11 version 22H2 and later, data can survive restarts initiated from within the Sandbox, but closing the Sandbox still ends the session and removes its state. See Microsoft’s Windows Sandbox FAQ.

What is new about the Store-delivered version?

Windows Sandbox itself is not new. Microsoft introduced a newer client beginning with Windows 11 version 24H2; it is distributed through the Microsoft Store, allowing client updates and improvements to arrive separately from the regular operating-system servicing cycle. Microsoft documents the version distinction and requirements in its Windows Sandbox versions documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Microsoft OEM System Builder | Windоws 11 Pro | Intended use for new systems | Authorized by Microsoft
  • STREAMLIMED AND INTUITIVE UI | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
  • JOIN YOUR BUSINESS OR SCHOOL DOMAIN for easy access to network files, servers, and printers.
  • OEM IS TO BE INSTALLED ON A NEW PC WITH NO PRIOR VERSION of Windows installed and cannot be transferred to another machine.
  • OEM DOES NOT PROVIDE PRODUCT SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.

The newer experience includes a refreshed WinUI 3 interface, runtime controls in the top-right “…” menu, and controls for clipboard redirection, audio and video input, and folder sharing. Microsoft also describes early command-line functionality. This is an updated client and interface for Windows Sandbox, not a separate Windows release or new virtualization technology.

For Microsoft’s Windows Insider announcement about the preview, see the September 20, 2024 announcement. Preview and Insider changes should not be assumed to be generally available on every PC.

Who can use Windows Sandbox?

Microsoft lists Windows 10 version 1903 or later and Windows 11 among the supported operating-system families, but Windows edition, hardware, and configuration determine whether the feature is available. It is generally associated with supported Pro, Enterprise, and Education editions; check your edition rather than assuming every Windows installation includes it. Microsoft’s full prerequisites and installation guidance are on its installation page.

Rank #2
Windows 11 Pro Upgrade, from Windows 11 Home (Digital Download)
  • Instantly productive. Simpler, more intuitive UI and effortless navigation. New features like snap layouts help you manage multiple tasks with ease.
  • Smarter collaboration. Have effective online meetings. Share content and mute/unmute right from the taskbar (1) Stay focused with intelligent noise cancelling and background blur.(2)
  • Reassuringly consistent. Have confidence that your applications will work. Familiar deployment and update tools. Accelerate adoption with expanded deployment policies.
  • Powerful security. Safeguard data and access anywhere with hardware-based isolation, encryption, and malware protection built in.
  • Supported AMD64 or Arm64 hardware.
  • Hardware virtualization enabled in firmware (BIOS/UEFI).
  • At least 4 GB of RAM; Microsoft recommends 8 GB.
  • At least 1 GB of free disk space; an SSD is recommended.
  • At least two CPU cores; Microsoft recommends four cores with hyper-threading.
  • If Windows Sandbox runs inside a virtual machine, nested virtualization must be enabled.

The newer Store-delivered client requires Windows 11 version 24H2 with the applicable update, plus internet access to Microsoft Store and Windows Update. Availability therefore depends on more than simply having Windows Sandbox turned on.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to install and start it

Use Windows Features

  1. Check that hardware virtualization is enabled in your PC’s BIOS/UEFI settings.
  2. Open Windows Search and type Turn Windows features on or off.
  3. Open the matching Windows Features dialog and select Windows Sandbox.
  4. Select OK, then restart if Windows asks you to.
  5. Open Windows Sandbox from the Start menu.

Use PowerShell

Open PowerShell as an administrator and run:

Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online

Restart if prompted, then launch Windows Sandbox from the Start menu.

If the feature is missing

Check whether your Windows edition supports it, virtualization is enabled, and your PC meets the CPU, memory, and storage requirements. A work or school administrator may have disabled the feature by policy. If you are inside a virtual machine, the VM must support nested virtualization. For Hyper-V, Microsoft documents these commands:

Rank #3
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
  • MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE
Set-VMProcessor -VMName <VMName> -ExposeVirtualizationExtensions $true
Update-VMVersion -VMName <VMName>

Use the actual VM name in place of <VMName>; these commands do not replace the requirement to configure the VM and host correctly.

Configure the isolation you need

Windows Sandbox is isolated, but it is not disconnected by default. Microsoft’s current configuration documentation says networking and clipboard redirection are enabled by default. Its default settings also generally enable vGPU on non-Arm64 devices and audio input; video input, printer redirection, and protected client are disabled. The basic default memory configuration allows up to 4 GB.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For untrusted files that do not need internet access, a .wsb file can disable networking and clipboard redirection. Save the following as, for example, SafeSandbox.wsb, then double-click it:

Rank #4
DEOY Market Compatible with Windows 11 Pro OEM Activation Key – 1 PC – Digital Delivery
  • DIGITAL OEM ACTIVATION KEY – Digital activation key compatible with Windows 11 Pro for one PC. This is an OEM-type license intended for activation on a compatible Windows PC.
  • FAST DIGITAL DELIVERY – Activation key and setup information are delivered electronically through Amazon Buyer-Seller Messaging after purchase. Maximum delivery time is 4 hours.
  • FOR WINDOWS 11 PRO – Designed for compatible PCs running or installing Windows 11 Pro. Internet access is required during the activation process.
  • OEM LICENSE FOR 1 PC – This OEM license is intended for a single computer and becomes associated with the device on which it is activated. It is not intended for transfer between multiple PCs.
  • CUSTOMER SUPPORT INCLUDED – DEOY Market provides assistance with activation and basic setup questions. Digital product only; no physical box, DVD, USB drive, or physical shipment is included.
<Configuration>
  <Networking>Disable</Networking>
  <ClipboardRedirection>Disable</ClipboardRedirection>
</Configuration>

You can also map a host folder into the Sandbox. Make the mapping read-only if the Sandbox only needs to inspect files, and create the host folder first:

<Configuration>
  <Networking>Disable</Networking>
  <ClipboardRedirection>Disable</ClipboardRedirection>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:SandboxSamples</HostFolder>
      <SandboxFolder>C:Samples</SandboxFolder>
      <ReadOnly>true</ReadOnly>
    </MappedFolder>
  </MappedFolders>
</Configuration>

A writable mapped folder is a direct route for changes from the Sandbox to persist on the host. Microsoft warns that software inside the Sandbox can compromise mapped folders, so avoid writable mappings for untrusted content. Disabling networking and clipboard sharing reduces exposure; neither setting is a guarantee of perfect containment.

Check which version you have

Microsoft’s FAQ gives these checks for the newer client:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
Microsoft Windows 11 (USB)
  • Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
  • Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
  • Make the most of your screen space with snap layouts, desktops, and seamless redocking.
  • Widgets makes staying up-to-date with the content you love and the news you care about, simple.
  • Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
Get-AppxPackage -Name WindowsSandbox | Select-Object Version

Or run:

wsb --version

You can also look in Settings > System > System components. If the AppX command returns no version, you may be using the older version. On Windows 11 version 24H2, Microsoft’s installation documentation says inbox Store apps such as Calculator, Photos, Notepad, and Terminal are not available inside Sandbox; app availability can change with updates.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Limits to know before relying on it

  • One session at a time: Microsoft’s FAQ says Windows Sandbox currently allows only one instance at once.
  • Same Windows build as the host: It is not a way to run a different Windows release. Use a full virtual machine for that.
  • Not a durable workspace: The environment is disposable when closed, even though supported versions can preserve data through an in-session restart.
  • Not a guaranteed malware lab: Integrations such as networking, clipboard, and mapped folders can create paths between the Sandbox and host. Advanced malware research may require a purpose-built lab with stronger controls and forensic tooling.
  • Store access matters for the newer client: Microsoft Store, Windows Update, and internet access are required for its Store-based servicing.

Windows Sandbox or a full virtual machine?

Need Windows Sandbox Full virtual machine
Quick temporary test Fast and integrated with Windows Requires more setup
Keep installed apps and files No; closing the session deletes its state Yes; designed for persistent environments
Use another Windows version or OS No; uses the host Windows build Yes, depending on virtualization software and available OS images
Snapshots and repeatable labs Not a normal built-in workflow Commonly available
Run parallel environments Microsoft says only one instance at a time Usually possible, subject to software and hardware limits
Best suited to Short-lived tests and a clean temporary desktop Long-running development, repeatable labs, and multiple OS versions

Windows Sandbox is also different from browser-isolation or cloud malware-analysis services, which may offer remote execution, reporting, or centralized controls. Those services can require uploading files or URLs, so consider confidentiality, retention, account, and cost terms before using them.

Troubleshoot a launch or update problem

Sandbox will not launch

  • Confirm virtualization is enabled in BIOS/UEFI and restart after enabling the Windows feature.
  • Check Windows edition, CPU architecture, memory, and free disk space against Microsoft’s prerequisites.
  • If Windows is running in a VM, verify nested virtualization is enabled.
  • On a managed PC, ask whether organizational policy blocks the optional feature.

The Store-based update does not complete

Make sure the device can reach the internet, Microsoft Store, and Windows Update. Microsoft says another update attempt may continue in the background after an initial failure; check the Store’s Updates & Downloads section as well.

You need to keep a file

Copy only the file you need to retain out of the Sandbox before closing it. Be cautious: transferring files through the clipboard or a writable mapped folder weakens the separation from the host. For longer-lived work, use a full VM or another environment designed to preserve state.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 3
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE
$54.99
SaleBestseller No. 5
Microsoft Windows 11 (USB)
Microsoft Windows 11 (USB)
Make the most of your screen space with snap layouts, desktops, and seamless redocking.; FPP is boxed product that ships with USB for installation
$128.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.