Notebookcheck

Windows Sandbox will enable safe isolation and testing of suspicious programs in Windows 10 19H1

Windows 10 19H1 will feature offer a native Sandbox. (Source: Microsoft)
Windows 10 19H1 will feature offer a native Sandbox. (Source: Microsoft)
Microsoft will soon be introducing Windows Sandbox as an optional feature in upcoming builds of Windows 10 19H1. Windows Sandbox offers a secure, isolated, and disposable environment to test out suspicious programs and prevent them from affecting the main OS installation. Windows Sandbox will be offered in Professional and Enterprise SKUs of Windows 10 and does not require any additional addons or VHDs to run.

The upcoming version of Windows 10 codenamed 19H1 will offer a new optional feature called Windows Sandbox. Windows Sandbox will allow you to run programs and test them in an isolated temporary desktop environment. This is great for those who are who are cautious about trying new or suspicious programs lest they cause issues with the main OS installation. Windows Sandbox is native and users do not need to download any additional software or virtual hard disks (VHDs) to get going. 

Sandboxing is not new to Windows and many users will know of the program Sandboxie that offers a way to run EXEs in isolation. Windows Sandbox is similar in purpose to Sandboxie, but is much more advanced. Essentially, Windows Sandbox offers the full functionality of Windows 10 in a virtual desktop environment that is totally isolated from the main OS. Every instance of Windows Sandbox presents a fresh brand-new desktop and applications that run within this neither persist their states nor can affect the host. This means, you can safely execute any suspicious program, get the job done, and close the Sandbox instance to permanently discard every data of the session. When you restart Windows Sandbox, you will be presented with a new desktop instance once again.

Microsoft says that Windows Sandbox uses Hyper-V for hardware-based virtualization and the Sandbox instance uses its own integrated kernel scheduler, memory management, and virtual GPU. Giving the Sandbox its own scheduler enables the host OS to treat the Sandbox as a normal process or an app instead of a virtual machine, which Microsoft says will make it more responsive. And since it's a process, the host OS can decide whether to reclaim memory allocated to the Sandbox and also optimize battery usage on laptops.

Windows Sandbox will also support graphics virtualization if the GPU and drivers are compatible with WDDM 2.5 or higher. This enables the host OS to dynamically allocate GPU resources depending on the load. Just like a virtual machine, you can also save snapshots of the Sandbox instance to disk so that it can resume faster without having to perform a clean boot every time.

Microsoft lists the following requirements for enabling Windows Sandbox, which is slated debut in Windows 10 Build 18305 —

  • Windows 10 Pro or Enterprise build 18305 or later
  • AMD64 architecture
  • Virtualization capabilities enabled in BIOS
  • At least 4GB of RAM (8GB recommended)
  • At least 1 GB of free disk space (SSD recommended)
  • At least 2 CPU cores (4 cores with hyperthreading recommended)

It remains to be seen how well Windows Sandbox can be integrated into regular workflows and whether app data from the Sandbox can be saved to the host drive or not. Nevertheless, this feature will be highly welcomed by enterprise customers and also provides a way for Microsoft to remove the burden of legacy components from consumer versions of the OS in effort to further streamline it for all device types. 

For a more in-depth look into the underpinnings of this technology, check out the Windows Kernel Internals Blog linked below.

Working For Notebookcheck

Are you a techie who knows how to write? Then join our Team! Especially English native speakers welcome!

Currently wanted: 
News and Editorial Editor - Details here

Source(s)

Read all 2 comments / answer
static version load dynamic
Loading Comments
Comment on this article
Please share our article, every link counts!
> Notebook / Laptop Reviews and News > News > News Archive > Newsarchive 2018 12 > Windows Sandbox will enable safe isolation and testing of suspicious programs in Windows 10 19H1
Vaidyanathan Subramaniam, 2018-12-19 (Update: 2018-12-19)
Vaidyanathan Subramaniam
Vaidyanathan Subramaniam - News Editor
I am a cell and molecular biologist and computers have been an integral part of my life ever since I laid my hands on my first PC which was based on an Intel Celeron 266 MHz processor, 16 MB RAM and a modest 2 GB hard disk. Since then, I’ve seen my passion for technology evolve with the times. From traditional floppy based storage and running DOS commands for every other task, to the connected cloud and shared social experiences we take for granted today, I consider myself fortunate to have witnessed a sea change in the technology landscape. I honestly feel that the best is yet to come, when things like AI and cloud computing mature further. When I am not out finding the next big cure for cancer, I read and write about a lot of technology related stuff or go about ripping and re-assembling PCs and laptops.