How to enable the sandows Home sandbox. File recovery in Sandboxie

Windows sandbox: how to work with an isolated Windows 10 test environment

Windows sandbox (original name Windows Sandbox) is introduced in Windows 10, starting with its version 1903. separated environment of dubious. Each time the launched this environment is a clean Windows 10 of the same version 1903, but working with some restrictions. In this environment, you can run the program downloaded from the left sites, use customization twes and make other risky settings, unpack suspicious files, sit on low.grade sites.

And even intentionally launch viruses and other evil. The sandbox is reliably isolated from the environment of the real Windows 10: the common in the first evil will go into oblivion along with its closure and will not penetrate the second. What is Windows Sandbox? And how to activate it in Windows 10?

What is a sandess sandbox

The sandbox is still at the stage of testing insider assemblies of the preparative accumulative update for the first half of 2019 made a splash for insiders as a real systemic novelty. But, alas, for a long time after the official release of the update, Windows Sandbox work in Russian.language assemblies Windows 10 1903 ended with an error. Microsoft took several months to eliminate this error. And now we can work freely with the sandbox.

Windows Sandbox is not a systemic component originally preinstalled, but activated as necessary. It can be activated in the 64-bit Windows 10, starting with the editorial office of Pro and, as already mentioned, starting with version 1903. There are also requirements arising from the specifics of the work of hypervizers:

The computer must support hardware virtualization, and it should be included in BIOS; Must be at least 4 GB of RAM; It is advisable to have a dual.core processor.

As you can see, most of the conditions of activation of the sandbox are the same as for activating the standard hypervisor Hyper-V. After all, it is on Microsoft Hyper-V technology that Windows Sandbox is based. But the sandbox is a limited virtualization environment. We cannot experiment with the emulation of the hardware, we cannot choose a version of Windows, and even the one that is, the virtual “dozens” medium is an emulator of a real system only in terms of using the classical functionality. It presents only separate UWP systemic applications, no Microsoft Store. and, accordingly, there is no way to install an UWP application from it.

There are other restrictions in the work of the virtual sandbox system. For example, the inaccessibility of launching system control of discs. Whether it is a temporary bug, or a specially conceived restriction is unknown. But in any case, in terms of the redundant of the disk space among Windows Sandbox, you can’t experiment. Disk space is the only disk from a small size.

Regardless of whether the real Windows 10 is activated, the virtual environment of the sandbox is a system in trial mode. The test environment is not designed for personalization, and this is the only thing that is affected by the lack of activation from a limited circle of the capabilities of an isolated environment.

Windows Sandbox is an application without any settings. We use this application as it is, everything that is available to us (perhaps so far) is an opportunity to expand the application to the full screen. And work with the sandwich environment, as in the environment for ordinary Windows.

The principle of work of the sandbox. the preservation of changes only until the application of the application, shutdown or reboot of the virtual system. From which another restriction follows: we will not be able to experiment with the settings and software that requires the change in the system to be reloaded or the use of operations in pre.load operations.

This is how Windows 10 now has a sandbox. This function is certainly designed for novice users. Well, or experienced users, but do not have time for active experiments and work with full hypervizers. And, by the way, another drawback will be discovered by those who work in parallel with full hypervisors. Virtualbox or VMware programs. The sandbox conflicts with third.party virtualization programs of operating systems. With the active component of Windows Sandbox, Virtualbox or VMware virtual machines will not be launched. The sandbox will need to be deactivated and disabled the start of the Hyper-V on the command line.

Sandboxie settings

To configure the program, press the right mouse button by the name “sandbox”. After that, in the context menu, click on the “Sandbox Settings” item.

In the sandbox settings window. “DefaultBox”, in the “Behavior” section, you can put the flag opposite the “Do not show the SandBoxie indicator in the window heading” if you do not want the windows of programs open in the “sandbox” a special icon. You can do this at your discretion.

When pressing the yellow field, in the “Color” window opened, you can choose a color to display a thin border around the window of the program running in the “sandbox”. After these settings, if you changed something in the program settings, click on the “apply” button.

In the “Restoration” section, in the “Fast Recovery” subsection, you can choose folders for quick recovery if you want to change the default program settings.

In the “immediate restoration” subsection, you can exclude files, folders or types of file extensions from immediate recovery if these files are saved by a program running in the “sandbox”.

In the “Deleting” section in the “Removal Offer” subsection, you can mark the point “Never remove this sandbox and not clean its contents” with a flag, in order not to lose the data stored in the “sandbox”.

In the “Restrictions” section, in the “Access to Internet” subsection, you can add programs to the list or delete programs from the list of programs that can access the Internet. You can allow or forbid the programs to go to the Internet when they are in a safe environment. If you click on the button to block all the programs, then all programs launched in the “sandbox” will be blocked by the Internet access.

In the “Appendices” section, you can choose the rules of conduct for various programs running in the Sandboxie program.

In the section of the “sandbox” menu by clicking on the “Install storage folder” item, you can change the disk on which the “sandboxes” will be stored if you have little space on the disk “C”.

After clicking on the point “Create a new sandbox”, you can create an unlimited number of “sandboxes”, each with your own settings to run programs with different settings of behavior from your “sandbox”.

This launch regime of several sandboxes at the same time, works only in a paid version of the program, after completing the introductory period of work with the program.

Each virtual space works separately, sandboxes are isolated from the system and from each other. By default, the application offers one isolated space of Sandbox Defaultbox.

How to use Sandboxie

In order to start the program in safe mode, click on the right mouse button by the name “sandbox” and in the context menu click on the “run” in the sandbox. In the list of launch items, you can choose the appropriate item for launching the program.

You can start a browser, a mailing client installed by default, and also start any program from here or from the Start menu. You can also start a conductor in a safe environment if you click on the “Run Windows Explorer” item.

After that, the conductor will be launched in a protected environment. To complete the conductor’s operation, in the “Sandboxie control” window, click on the program folder with the right mouse button, and in the context menu, select the “Full Program” item, or simply close the conductor in the usual method by clicking on the red button for this.

It will be even easier to launch the program in Sandboxie, just by clicking on the folder or label of the program, and then select the “Launch in the sandbox” in the context menu.

If you have created several “sandboxes”, then the Sandboxie program will invite you to choose the right “sandbox” to launch the program. Choose an isolated environment, and then click on the OK button.

After that, the program starts in an isolated environment. When a mouse cursor is hung on a program running in an isolated environment, a thin color border will be visible around the program window.

Windows Sandobox sandbox activation in Windows 10 Home

Windows Sandbox sandbox creates an isolated environment in which you can run “.exe “Files without prejudice to your computer. When you install software in the sandbox, it will have nothing to do with the host. In Windows 10 Pro, you can turn on Windows Sandbox with one click, but what to do if the sandbox does not come in the home version of Windows 10 Home? Do not worry, using CMD it is possible to activate Windows Sandbox in the home version of Windows 10 Home, despite the fact that this function is not provided by Microsoft. Windows Sandbox is available from 1903 versions.

Launch the command line on behalf of the administrator and enter a huge team below. The team consists of two parts, enter first the first part, then the second:

Echo Checking for Permissions Nul 21 “%Systemroot%\ System32 \ Cacls.exe “%Systemroot%\ System32 \ Config \ System”

Echo Permission Check Result: %Errorlevel %

REM.- IF Error Flag Set, We Do Not Have Admin. IF ‘%errorlevel%’ Neq ‘0’. GOTO UACPROMPT) Else (Goto Gotadmin)

Uacprompt echo set Uac = Createobject^(“Shell.Application “^)%TEMP%\ getadmin.VBS “Echo UAC.Shellexecute “%~ s0”, “”, “”, “runas”, 1 “%TEMP%\ getadmin.vbs “

Echo Running Creed Temporary “%TEMP%\ Getadmin.VBS “Timeout /T 2″%TEMP%\ Getadmin.VBS “Exit /B

Gotadmin If Exist “%TEMP%\ Getadmin.VBS “(DEL”%TEMP%\ Getadmin.VBS “) PUSHD”%CD%”CD /D”%~ dp0 “

Echo Batch Was Successfully Started with Admin Privileges Echo. CLS Title Sandbox Installer

DIR /B %Systemroot %\ Servicing \ Packages \ Containers.Mum Sandbox.TXT

for /f %% i in (‘findstr /i. Sandbox.txt 2^nul ‘) do dism /online /norestart /add-pokkage: “%Systemroot%\ Servicing \ Packages \ %% i”

Dism /Online /Enable-Feature /Featurename: Containers-DisposPosableClientVM /LIMITACCESS /All

If you are too lazy to enter the command, then I created “.BAT “File so that this team does everything automatically with one press. Just download and run.BAT file

Reload your PC and find in the “Search” menu to start a sandbox by typing Sandbox.

If you can’t find, then you need to make sure that it is activated. To do this, go to the “Panel Management” “Deleting Programs” “Turning on and disconnecting the Windows components” Find the Windows Sandword and Put the Activation in the list, if it did not stand, press the “OK” and restart the PC.

advertising

For example, I’ll turn on www.YouTube.com. Everything is perfectly reproduced. About 4-5 GB of memory is consumed. Intel Core i5 processor with four cores is loaded by 40-60%.

The sandbox itself consumes 1.3 GB.

If desired, you can copy any portable browser into it and use it, it takes several tens of seconds. I copy Comodo Dragon.

There were no special freezes and lags. Sometimes there were rare drying after closing the windows, and Edge did not want to lose the video on www.YouTube.com, but the Internet Explorer helped out, everything was perfectly reproduced in it.

It is convenient to use the Windows Sandbox Editor program to start the sandbox and its settings from Technet.

She is in English, but simple and understandable. After its use, a file with the extension of WSB will be saved, the launch of which you will run the sandbox with the specified parameters. Do not forget to enable acceleration through GPU in Windows Sandbox, this accelerates working with the browser.

Do not forget that “Drag and Drop” does not work at the sandbox window, but “copy” and “insert” work. Copying in the case of using SSD drive is quite fast. The main thing, do not forget that all the contents of Windows Sandbox will be destroyed when closed, so you need to copy the information to the computer before turning off.

In the form of a built.in Windows Sandbox virtual machine, we received not only a tool for checking suspicious files, but also the possibility of absolutely safe opening of malicious sites. But, do not forget that with such a visit to dangerous sites, the information of the browser can be compromised, so try not to introduce logins and passwords.

Subscribe to our channel in Yandex.Zen or Telegram channel @overclockers_news. These are convenient ways to monitor new materials on the site. With pictures, advanced descriptions and without advertising.

How to activate the sandbox at the home version of Windows 10 1903

A new function called Sandbox or otherwise sandbox has appeared in Windows 10 1903. This component allows you to create a special isolated environment inside the operating system, in which a user with a minimum risk can launch suspicious applications. Even if they turn out to be harmful, Sandbox will not allow them to go beyond the “boundaries” of the virtual space and make destructive changes to the host system.

In home versions of Windows 10 1903, the sandbox is disabled by default, but nothing prevents you from using it, since the component itself in Windows 10 Home is still present.

To do this, we offer to use the command file, which you can download by link below. In order for the sandbox to work, in any case, your computer must meet the following requirements:

Windows 10 should be assembly 18301 or higher. Architecture must be X64-bit. The processor must be at least 2-core. On board there should be at least 4 GB of RAM. BIOS should include virtualization.

Download the archive, unpack and launch the Batnik “Sandbox Installer.BAT “from name of the administrator.

The script will check the availability of admin rights, and then will load and connect packages using, possibly a console utility of DISM.

After rebooting the computer, you can turn on the sandbox using the classic “programs and components” applied, called from the control panel or fast Appwiz command.CPL. and start. from the Start menu.

How to include Hyper-V, sandbox and group policy editor in Windows 11 Home

Unlike the editors Pro. In the home version of Windows 11, some secondary components are not available, for example, Windows 11 Home users will not be available to built.in hypervisor, editor of local group politicians and sandbox. But their inaccessibility does not mean their absence in the established system, otherwise the activation of these components would be impossible when moving from home editorial office to professional.

Having activated Windows 11 Home with a professional edition key, the user will find that all three designated components appeared in the system, however, all their advantages can be evaluated in the home version using a small trick known since Windows 10.

We are talking about teams of the built.in DISM utility, which allows you to activate these components.

Teams for Windows 10 were written, but as it turned out, with a similar result, they work in Windows 11.

In order to simplify our readers, we decided not to bring the teams used, but to publish ready-made scripts that want to activate Hyper-V, sandbox and group policies will just have to run.

Download the archive with command files at the link:

In the archive you will find three files: Group Policy Installer.Bat. Hyper-V Installer.Bat and Sandbox Installer.Bat.

The first is activated by the editor of group policies, the second includes a built.in hypervisor, the third makes it possible to use a sandbox.

Launch all three files one by one on behalf of the administrator.

In the command line that opened, you will need to choose the “Installierer” option, introducing the corresponding number 1 and by pressing the input.

Enable virtualization in BIOS

First, you need to make sure that virtualization is enabled. To do this, open the task dispatcher by pressing the combination of the Ctrlshiftesc buttons. Next, go to the “Productivity” tab, and from below in the “Virtualization” column, should be included.

If your virtualization is disabled, then go to the BIOS and turn it on. In my case, I went to BIOS and crossed the parameters of Advanced CPU Configuration Intel Virtualization Technology and Enabled.

Turn on or disable the sandess 11/10 sandbox

Press the combination of Winr buttons and enter Appwiz.CPL to open programs and components. Next left, click on “Turning on or disconnecting Windows components”.

Here look for a sandths sandwich. To enable the “sandbox” function, select the “Sandbox Windows” and click the “OK” button. If necessary, reboot the computer. To turn off the sandbox, remove the flag next to it and press the OK button.

How to enable virtualization in BIOS

In some cases, the “Windows sandwalk” item “Windows components” can be inactive, and when the cursor is instructed, the message “It is not possible to install the Windows sandbox: the processor does not have the required virtualization capabilities”. This error suggests that the virtualization function is disabled on your computer or your processor does not support this function.

To include virtualization, you need to go to BIOS, turn on the corresponding option there and restart the computer. Depending on the manufacturer of the processor and the motherboard, the name of this option in BIOS may differ. For example, on Intel boards it can be “VT-X” or “Intel Virtualization Technology”.

And on AMD boards-“AMD-V”, “SVM” or “SVM Mode”.

After turning on the virtualization in BIOS, you need to reboot the computer, go to Windows components and turn on the sandbox.

How to install a sandbox in Windows 10 Home

If you have a home version of Windows 10 (Windows 10 Home), then you just can’t turn on the sandbox. It must first be installed using a command line. To simplify this procedure, there is a BAT file that was written by a German enthusiast. You can download this file and get detailed information on this page (text on German).

• Sandbox Installer.ZIP is an archive with a batter that sets a sandbox;
• Sandbox Uninstaller.ZIP is an archive with a batter that deleys a previously installed sandbox;

In case the links do not work, we bring the contents of both files.

@Echo off echo Checking for permissions nul 21 “%Systemroot%\ System32 \ Cacls.exe “%Systemroot%\ System32 \ Config \ System” Echo Permission Check Result:%Errorlevel%REM. IF Error Flag Set, We Do Not Have Admin. if ‘%errorlevel%’ neq ‘0’ (echo readsting administration Privileges Goto Uacprumpt) Else (Goto Gotadmin): Uacprumpt Echo Set Uac = Createobject^(“shall.Application “^)”%TEMP%\ Getadmin.vbs »Echo UAC.Shellexecute “%~ s0”, “”, “”, “runas”, 1 “%TEMP%\ getadmin.VBS »Echo Running Creed Temporary”%TEMP%\ Getadmin.VBS »Timeout /T 2″%TEMP%\ Getadmin.VBS »Exit /B: Gotadmin If Exist”%TEMP%\ Getadmin.VBS “(DEL”%TEMP%\ Getadmin.VBS ”) PUSHD“%CD%”CD /D“%~ DP0 ”Echo Batch Was Successfullly Started with Admin Privileges Echo. CLS Title Sandbox Installer PushHD “%~ DP0 ″ DIR /B%Systemroot%\ Servicing \ Packages \ Containers.Mum Sandbox.Txt for /f %% i in (‘foundstr /i. Sandbox.txt 2^nul ’) do dism /online /norestart /add-pokkage:”%Systemroot%\ Servicing \ Packages \ %% I “del Sandbox.Txt DISM /Online /Enable-Feature /Featurename: Containers-DisposPosableClientVM /LIMITACCESS /All PAUSE

@Echo off echo Checking for permissions nul 21 “%Systemroot%\ System32 \ Cacls.exe “%Systemroot%\ System32 \ Config \ System” Echo Permission Check Result:%Errorlevel%REM. IF Error Flag Set, We Do Not Have Admin. if ‘%errorlevel%’ neq ‘0’ (echo readsting administration Privileges Goto Uacprumpt) Else (Goto Gotadmin): Uacprumpt Echo Set Uac = Createobject^(“shall.Application “^)”%TEMP%\ Getadmin.vbs »Echo UAC.Shellexecute “%~ s0”, “”, “”, “runas”, 1 “%TEMP%\ getadmin.VBS »Echo Running Creed Temporary”%TEMP%\ Getadmin.VBS »Timeout /T 2″%TEMP%\ Getadmin.VBS »Exit /B: Gotadmin If Exist”%TEMP%\ Getadmin.VBS “(DEL”%TEMP%\ Getadmin.VBS ”) PUSHD“%CD%”CD /D“%~ DP0 ”Echo Batch Was Successfullly Started with Admin Privileges Echo. CLS Title Sandbox Installer PushHD “%~ DP0 ″ Dism /Online /Disable-Feature /Featurename: Containers-DisposPosableClientVM DIROTMROOT%\ SERVICING \ PACKAGES \ CONTAINERS.Mum Sandbox.Txt for /f %% i in (‘foundstr /i. Sandbox.txt 2^nul ’) do dism /online /norestart /remov-pokkage:”%Systemroot%\ Servicing \ Packages \ %% I “del Sandbox.TXT PAUSE

In order to install the sandbox in Windows 10 Home (home) you just need to download the archive “Sandbox Installer.zip “, unpack it on your computer and start the BAT file.

After that, you need to wait for the installation and restart the computer. After rebooting the computer, the Windows Sandbox program will appear with the list of installed programs in your Start menu, and you can start using it.

This method of turning on the sandbox is intended only for Windows 10 Home, but perhaps it will work in the home version of Windows 11.

How to launch a sandess sandbox

The system component is installed on PC, now I will talk about how to launch Windows Sandbox in Windows 10.

• Enter the Start menu.
• In the list of programs, find “Windows Sandbox”.
• Click on the application with the right mouse button, first select “Additionally”, and then “Launching on behalf of the administrator”.

The application logo will appear on the computer desktop, and then the Windows sandbox window will open.

Use of the sandess sandbox

A “clean” Windows 10 works inside your OS on the desktop. The version of the system launched in a virtual environment always corresponds to Windows installed on the computer. By default, in the sandbox, applications included in the supply of the operating system are installed.

Now, for testing, you can install the desired program by downloading the application from the Internet in the sandbox itself using a virtual system, or copy a file from a PC, and then insert it into Windows Sandbox from the host system (main OS). Only one copy of the sandess sandbox is operating on PC.

Windows sandbag application can be expanded to the full screen. In the expanded window, in the upper part there is a panel for controlling the isolated medium.

After closing the sandths of Windows, all the contents will be irrevocably lost. A window will open on the screen with a warning about removing all data without the possibility of recovery.

To create configuration files (WSB) of the Windows sandbox, a free Windows Sandbox Editor program has been created, in which you can configure the component in a safe environment.