Microsoft creates Windows Sandbox to help test untrusted .exe files

Microsoft wants to help out business and power users with a new feature it’s launching for Windows 10 Pro and Windows 10 Enterprise. Instead of needing to set up virtual machines to check out unknown apps, Microsoft will let users launch apps in an isolated desktop environment with Windows Sandbox. This creates a temporary desktop environment that designed to be secure and disposable. Once you’re done running an app, the entire sandbox will be disposed. While it doesn’t need a virtual machine, it’ll require virtualization capabilities be enabled in the BIOS.

It creates a lightweight (100MB) installation of Windows to run an app. It makes use of Windows own hypervisor to create a separate kernel that’s isolated from the host PC. Windows 10 testers will get to try out this new feature once build 18305 arrives.

Source: The Verge