iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The safest general-purpose method is to run the game in Windows Sandbox with networking disabled and no mapped host folders. Sandbox is disposable, so files created inside it disappear when you close it. If the game must run on your normal Windows installation, create a Windows Defender Firewall outbound rule for every executable that needs blocking.
Neither method guarantees that an arbitrary game will run. Launchers, graphics requirements, account checks, cloud saves and anti-cheat drivers can require services that an isolated or offline environment cannot provide. Treat the configuration below as a controlled starting point, then test with a nonessential copy and account.
Choose the isolation method before changing anything
Your decision depends on where the game must run and what it needs to access. Sandbox gives stronger separation from the host but is temporary and has compatibility limits. A firewall rule keeps the game on your normal installation but controls network traffic only; it does not separate the game from your files.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Approach | What it controls | Important limitation |
|---|---|---|
| Windows Sandbox with networking disabled | Runs the game in a disposable Windows environment without network access | Windows edition support is limited, and game, launcher, graphics and anti-cheat compatibility is not established generically |
| Sandbox with a read-only mapped folder | Exposes only a selected host directory while preventing writes through that mapping | The guest can still read every file in the mapped directory; writable mappings can change the host |
| Windows Defender Firewall outbound program rule | Blocks outbound traffic from a selected executable on the regular Windows installation | You must identify the actual game, launcher, updater and helper executables; the game remains exposed to host files |
What Windows Sandbox does—and does not—protect
Windows Sandbox is a disposable, virtualized Windows environment. Closing the Sandbox window disposes of that instance and the files installed inside it. This makes it suitable for testing an untrusted game executable or a temporary installation without leaving the guest’s ordinary changes on the host.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
The isolation is not automatic for every host resource. Sandbox networking is enabled by default, and mapped folders deliberately create a bridge to host data. Microsoft warns that enabling networking can expose untrusted applications to the internal network. Clipboard redirection is also enabled in the basic configuration, so copied text and other clipboard data can cross between host and guest unless you disable it.
A Sandbox instance is shared by the workflows running inside it. Applications in the same instance can observe or interfere with one another, so do not treat one open Sandbox as separate compartments for mutually untrusted games or tools.
Supported Windows editions
Microsoft lists Windows Sandbox for Pro, Enterprise and Education editions. Windows Home is not supported. If the Windows Features dialog does not offer “Windows Sandbox,” first verify the edition rather than trying to force-install the feature.
Why compatibility is case-specific
A game may need a launcher, an online sign-in, graphics acceleration, a particular runtime, or a kernel-level anti-cheat component. Disabling networking breaks services that require an account or online entitlement. Some anti-cheat systems reject virtualized environments or need drivers that cannot be installed in the disposable guest. The fact that Sandbox can start an application does not establish that a particular game will run correctly.
Prepare Windows Sandbox
- Open Settings, choose System, then About, and confirm that the edition is Pro, Enterprise or Education.
- Press Windows key + R, enter
optionalfeatures, and press Enter. - In Windows Features, select Windows Sandbox, choose OK, and restart Windows when prompted.
- Create a plain-text file with a
.wsbextension. In File Explorer, enable View > Show > File name extensions first so the file does not become.wsb.txt. - Double-click the configuration file to open the disposable environment. The XML settings apply to that Sandbox instance only.
If the feature is enabled but the Sandbox will not start, check that hardware virtualization is enabled in firmware and that Windows is fully updated. Microsoft documents Sandbox as a virtualization-based feature, but does not establish one universal hardware configuration for every PC, so consult your computer or motherboard documentation for firmware-specific settings.
Make a clean test plan
Decide what success means before launching the game. For an offline test, that may be reaching the title screen and loading a local save without contacting a service. For a host-based firewall test, it may be confirming that the game starts while sign-in, update checks or cloud synchronization fail as expected. Write down the executable paths, configuration file used and any files you intentionally copied in. This makes it easier to repeat the test and remove the right firewall rules afterward.
Use a nonessential game copy and account. Do not place valuable saves or credentials in a mapped directory, and do not assume that a disposable guest can protect an account from every possible game or launcher behavior. The configuration reduces exposure; it is not a guarantee of compatibility or complete containment.
Free tools Windows power users keep installed
One-click scans. No signup required.
Start with a no-network, no-folder configuration
Use this minimal configuration when the game does not need host files and you want the smallest exposure from the host:
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
<Configuration>
<Networking>Disable</Networking>
<ClipboardRedirection>Disable</ClipboardRedirection>
</Configuration><Networking>Disable</Networking> overrides the default enabled state. Omitting <MappedFolders> means no host directory is shared. Disabling clipboard redirection removes another straightforward host-to-guest transfer path. You can copy this XML into Notepad, save it as Game-Isolated.wsb, and open it.
Keep the file as a reusable baseline. If a later test needs a host folder or networking, create a second configuration rather than quietly changing the minimal one. Giving each file a descriptive name, such as Game-Offline-NoFiles.wsb or Game-ReadOnlyData.wsb, helps prevent an accidental launch with broader access.
Optional Protected Client mode
Protected Client mode adds an AppContainer-based restriction to Sandbox. Add the following line when you want that additional boundary:
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11<ProtectedClient>Enable</ProtectedClient>Protected Client does not decide whether networking or host folders are available. Keep the explicit networking and mapping choices in the file; the setting is an extra control, not a substitute for them.
Do not disable vGPU automatically
Microsoft’s sample for examining an unknown download disables the virtual GPU, but that sample demonstrates an available option rather than a universal game recommendation. Many games need graphics acceleration. Leave vGPU at its normal setting unless you have a specific reason to disable it and have confirmed that the game does not require it.
Expose only the files the game genuinely needs
The preferred configuration has no mapped folders. If the game needs an installer, save file or asset from the host, map the smallest possible directory and make it read-only:
<Configuration>
<Networking>Disable</Networking>
<ClipboardRedirection>Disable</ClipboardRedirection>
<MappedFolders>
<MappedFolder>
<HostFolder>C:GamesGameData</HostFolder>
<SandboxFolder>C:HostGameData</SandboxFolder>
<ReadOnly>true</ReadOnly>
</MappedFolder>
</MappedFolders>
</Configuration>Replace the host path with the exact directory you intend to expose. Inside Sandbox, the folder appears at C:HostGameData. A read-only mapping prevents the guest from writing through that mapped path, while still allowing it to read every file in the directory. Do not map an entire user profile, the root of a drive, a folder containing passwords, or a directory that contains unrelated personal data.
Recommended Free Tools
Check the directory contents before starting. Remove saved credentials, browser profiles, documents and unrelated game libraries. A read-only flag limits writes, not reads: the application can still inspect all files that are present in the mapped directory. If the game requires several assets, place copies of only those assets in one dedicated staging folder instead of mapping several broad locations.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
A writable mapping has a fundamentally different risk: changes made through the guest persist on the host after the Sandbox session is disposed. That includes modified, created or deleted files in the mapped directory. Use writable mappings only when persistence is essential, and dedicate a separate, disposable host folder to that purpose. Never use a writable mapping for a folder containing your normal saves or personal documents.
Installing and launching from a mapped folder
- Place only the installer or game files required for the test in the dedicated host directory.
- Map that directory read-only and keep networking disabled.
- Open the Sandbox path shown in
<SandboxFolder>and start the installer or executable. - If the installer needs to write beside the source files, install into a new directory inside the Sandbox rather than changing the mapped host directory.
- Record any settings needed to repeat the test; files installed only inside the guest disappear when you close Sandbox.
With networking disabled, a launcher cannot download updates, authenticate online or contact cloud-save services. An offline installer and an account flow that does not require a live connection may work; this must be determined for the specific game. If an installer offers optional components, install only what the test requires and remember that those components will need to be installed again in the next disposable session.
Account for every sharing channel
- Network: Disabled networking prevents the guest from reaching the network through the Sandbox configuration. It does not make an online-only game usable.
- Mapped folders: These are explicit host-to-guest bridges. Read-only reduces write risk but does not hide the mapped files from the guest.
- Clipboard: Disable clipboard redirection when copied credentials, document text or other host data should not cross into the guest.
- Virtual graphics: Graphics behavior is game-dependent. Do not copy a malware-analysis configuration that disables vGPU without considering the game’s rendering needs.
- Other applications in the same instance: Run only software that you are willing to place in the same disposable environment; separate untrusted programs into separate Sandbox sessions.
These controls are independent. Disabling networking does not remove a mapped folder, and read-only mapping does not prevent the guest from reading the exposed files. Likewise, Protected Client mode does not replace a deliberate decision about networking, clipboard or folder mappings. Review every setting in the XML before each run.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesWhen the game must run on the regular Windows installation
If Sandbox cannot run the game or the game needs normal Windows drivers, use an outbound rule in Windows Defender Firewall. This approach blocks selected network traffic while the game remains installed on and able to read the host. It is therefore a network-control measure, not a file-isolation measure.
Identify the executables first
Do not assume the main game executable is the only process that connects to the internet. A typical installation may include a launcher, updater, crash reporter, overlay, helper service and the game itself. Start the launcher and game, open Task Manager’s Details tab, and note each relevant executable and its full path. If the game uses a service, record the service name as well. Blocking only one file can leave another component online.
Keep the path information after updates. A launcher may start a differently named executable, install a new version in a new directory or replace the file to which the rule points. A rule tied to an old path can remain present while the current executable has no matching block.
Create an outbound program rule
- Press Windows key + R, enter
wf.msc, and press Enter. - In Windows Defender Firewall with Advanced Security, select Outbound Rules.
- Choose New Rule… in the Actions pane.
- Select Program, choose This program path, and browse to the exact executable path you recorded.
- Select Block the connection.
- Choose the network profiles to which the block should apply. If the game must never make outbound connections, apply the rule to all profiles; otherwise select only the profiles appropriate to your test.
- Give the rule a precise name such as
Block ExampleGame outbound, review the summary, and select Finish. - Repeat the process for each launcher, updater or helper executable that should be blocked. Create separate, clearly named rules so you can later identify and remove one without disturbing another.
Windows allows outbound traffic by default unless a blocking rule applies. A blocking outbound program rule prevents the selected program from sending outbound traffic, but it does not automatically cover every child process or a different executable launched later. Recheck the recorded paths after game updates because an update can replace files or change the installation directory.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Verify and undo the firewall change
Launch the game with the rules enabled and observe whether it behaves as expected. An online sign-in, matchmaking, update check or cloud-save operation may fail by design. If you need to restore connectivity, return to Outbound Rules, right-click the named rule and choose Disable Rule; delete it only when you are certain it is no longer needed. Keep one rule per executable rather than using a broad block that could affect unrelated programs.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Test the rule with the launcher closed and reopened, because a launcher may spawn a helper process only during startup. If the game remains online, compare the running process list with your recorded paths and add a narrowly scoped rule for the component that made the connection. Avoid changing unrelated system-wide firewall behavior while diagnosing one game.
Sandbox versus firewall: practical trade-offs
Sandbox is the better starting point when the priority is temporary separation from the host file system and the game can run without unsupported drivers or online services. Its strongest defaults are the ones you choose explicitly: networking disabled, no mapped folders and, when appropriate, clipboard redirection disabled. The guest is discarded when closed, but anything intentionally mapped remains a bridge to the host.
The firewall route is appropriate when the game needs the normal Windows installation, graphics stack, launcher or driver. It can stop outbound traffic for selected paths, but it does not prevent the game from reading, changing or deleting files available to the host account. It also requires maintenance as launchers and helpers change. Neither option should be described as a universal compatibility solution.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Troubleshoot common failures
Sandbox opens, but the game immediately exits
- Check whether the game requires an anti-cheat driver, online authentication or a launcher service that cannot operate in a disposable guest.
- Confirm that the game files are complete and that any required runtime is installed inside the current Sandbox session.
- If rendering fails, review the vGPU choice. Disabling vGPU may remove an acceleration path the game needs.
- Test a nonessential copy rather than your primary account or valuable save data.
The game says it is offline or cannot sign in
That is an expected result when networking is disabled. Enable networking only in a separate test configuration if you accept the exposure to the internal network, and do not combine that configuration with broad writable host mappings.
The mapped folder is missing or cannot be written
Check the host path spelling, confirm that the XML was saved with a .wsb extension, and look under the exact sandbox path specified in <SandboxFolder>. A <ReadOnly>true</ReadOnly> mapping is intentionally not writable. Install or save to a directory inside Sandbox if temporary writes are required.
Blocking the game executable did not stop network activity
Identify the process that is actually making the connection. Add rules for the launcher, updater, helper service or alternate executable as appropriate. Avoid blocking an entire directory or a system-wide group merely because one component was missed; broad rules can break unrelated software.
Host files changed after closing Sandbox
Inspect the configuration for writable mapped folders. Any mapping without read-only protection can persist guest changes on the host. Remove the mapping, recreate the folder from a clean copy, and use a dedicated read-only directory for future tests.
A later run behaves differently
Sandbox starts fresh, so software installed, settings changed and saves created only inside the previous guest are gone. Reinstall the required components or keep a documented, read-only source directory. For firewall tests, verify that the executable path and rule still match after updates.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
A practical isolation checklist
- Use Windows Sandbox when the game can run in a disposable guest and you want temporary file separation.
- Start with networking disabled and no mapped folders.
- Disable clipboard redirection when clipboard transfer is outside your threat model.
- Map only a dedicated directory, and set
<ReadOnly>true</ReadOnly>unless persistence is explicitly required. - Keep vGPU enabled unless a tested, game-specific reason requires otherwise.
- Use a separate Sandbox session for each mutually untrusted application.
- If the game must run on the host, create outbound firewall rules for every network-using executable you identify.
- Expect online features and some anti-cheat systems to fail under isolation; compatibility must be tested per game.
- After testing, disable or remove named firewall rules and close the Sandbox so the disposable guest is discarded.
Frequently Asked Questions
Does Windows Sandbox work on Windows Home?
Microsoft lists Sandbox for Pro, Enterprise and Education editions; Windows Home is not supported. Verify the edition before troubleshooting the feature.
Is networking already off in Windows Sandbox?
No. Networking is enabled by default. Add <Networking>Disable</Networking> to the .wsb file when the game does not need network access.
Can I share a game folder safely with Sandbox?
Share only the smallest necessary directory and set <ReadOnly>true</ReadOnly>. The guest can still read every file in that folder, so do not include passwords, profiles or unrelated personal data.
Will a firewall rule block the whole game and its launcher?
Not automatically. Create separate outbound program rules for the game, launcher, updater, helper service or other executable that actually makes connections.
Why did the game fail after networking was disabled?
Online sign-in, updates, matchmaking and cloud saves may require a live connection. Anti-cheat, launcher and virtualization compatibility are also game-specific; isolation does not guarantee that a particular title will run.
Do files in Sandbox survive when I close it?
Files created only inside the guest are discarded when the Sandbox instance closes. Changes made through a writable mapped host folder persist on the host, which is why read-only mappings are preferred.
The Bottom Line
For the smallest host exposure, run the game in a fresh Windows Sandbox with networking disabled, no mapped folders and, when appropriate, clipboard redirection disabled. Map only a dedicated directory read-only when files are unavoidable. If the game requires the regular Windows installation, use narrowly scoped outbound Firewall rules for every network-using executable, and remember that this blocks traffic but does not isolate host files. Test each game, launcher and anti-cheat combination separately.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
