How to enable Windows Sandbox on Windows 11, 10

• Windows Sandbox can now be enabled from the Settings app on Windows 11, making the setup process much easier than using Windows Features.
• You can also turn on the feature from Control Panel or with PowerShell and Command Prompt commands, which are useful for administrators and scripted deployments.
• Once enabled, Sandbox provides an isolated Windows desktop that is automatically discarded when you close it, making it ideal for testing unknown applications.

Windows Sandbox is one of the safest ways to test untrusted applications on Windows 11 and Windows 10. I use it whenever I need to check a new utility or unknown installer because it provides a clean, isolated Windows environment without risking my main installation or personal files.

Unlike a traditional virtual machine that requires installing and maintaining a separate copy of Windows, Sandbox uses Microsoft’s Hyper-V technology to launch a lightweight, disposable desktop in seconds. Everything you do inside the environment is automatically deleted when you close it, so every session starts with a fresh Windows installation.

Windows Sandbox is available on the Pro and Enterprise editions of Windows. Before you can use it, your PC must support hardware virtualization, and the feature must be enabled in the UEFI firmware (or BIOS on older systems). 

In this guide, I will show you how to enable Windows Sandbox on Windows 11 as well as in the older version of the operating system.

• Enable Windows Sandbox from Settings
• Enable Windows Sandbox from Control Panel
• Enable Windows Sandbox from PowerShell
• Enable Windows Sandbox from Command Prompt
• Pureinfotech’s Take
• FAQs about turning on Windows 11 Sandbox

Enable Windows Sandbox from Settings

To enable Windows Sandbox from the Settings app, follow these steps:

1. Open Settings on Windows 11.

2. Click on System.

3. Click the Advanced page.

4. Click the Virtual Workspaces setting.

   

5. Turn on the “Windows Sandbox” toggle switch.

   

6. Click the Restart now button.

After you complete the steps, the Sandbox feature will be enabled on your computer.

Why use the Settings app?

If you’re running Windows 11 25H2 or later, I recommend enabling Sandbox from Settings instead of Control Panel, as this method is now the primary way to manage Sandbox.

Enable Windows Sandbox from Control Panel

To enable “Windows Sandbox” to run untrusted apps on Windows 11 (or 10), follow these steps:

1. Open Control Panel.

2. Click on Programs in the left pane.

3. Click the Programs and Features page.

4. Click on “Turn Windows features on or off” under the “Program and Features” section.

   

5. Check the Windows Sandbox option.

   

6. Click the OK button.

7. Click the Restart now button.

Although this method still works on Windows 11 and Windows 10, it’s now mostly a compatibility option. I still use it on older devices because it’s available on every supported version, but on newer releases the Settings app offers a cleaner experience.

If you want to disable the feature, you can use the same instructions, but in step 3, clear the option.

Enable Windows Sandbox from PowerShell

To enable Windows Sandbox with PowerShell commands, follow these steps:

1. Open Start.

2. Search for PowerShell, right-click the top result, and select the Run as administrator option.

3. Type the following command to enable Sandbox users and press Enter:

   Enable-WindowsOptionalFeature -Online -FeatureName "Containers-DisposableClientVM" -All

   

4. Type “Y” and press Enter to restart the computer

Once you complete the steps, the feature will be enabled and ready from the Start menu.

If you want to undo the change, you can use the same instructions, but in step 3, run the Disable-WindowsOptionalFeature -Online -FeatureName "Containers-DisposableClientVM" command.

In practice, I rarely enable Sandbox with PowerShell on a personal computer. Where this method shines is when configuring several devices or automating deployments, since the command can easily be included in scripts.

Enable Windows Sandbox from Command Prompt

To turn on Windows Sandbox with Command Prompt commands, follow these steps:

1. Open Start.

2. Search for Command Prompt, right-click the top result, and select the Run as administrator option.

3. Type the following command to enable Windows Sandbox and press Enter:

   Dism /online /Enable-Feature /FeatureName:"Containers-DisposableClientVM" -All

   

4. Type “Y” and press Enter to restart the computer

After you complete the steps, you can start using Windows Sandbox to test apps and visit untrusted websites without affecting the main installation.

If you want to undo the change, you can use the same instructions, but in step 3, run the Dism /online /Disable-Feature /FeatureName:"Containers-DisposableClientVM" command.

The first time Windows Sandbox launches, you’ll notice it looks almost identical to a fresh Windows installation. That’s intentional. Microsoft starts every session from a clean image, meaning no previously installed software, user accounts, or files are carried over. If you copy a suspicious installer into Sandbox, test it, and then close the window, Windows automatically destroys the entire environment without leaving traces behind.

The DISM command performs the same task as PowerShell but is especially useful in recovery environments or when you’re troubleshooting Windows features and only have access to Command Prompt.

Pureinfotech’s Take

I’ve relied on Windows Sandbox for years, and I think it’s one of the most underrated security features Microsoft has built into Windows. Too many people still download and run unknown apps directly on their PCs when Sandbox provides a much safer way to verify whether an installer behaves as expected.

I also like that Microsoft has started moving the feature into the Settings app. It’s a small change, but it signals the company’s ongoing effort to retire legacy Control Panel pages and make advanced features easier to discover. At the same time, I don’t expect Control Panel to disappear anytime soon, especially since many IT professionals still depend on it.

If you have Windows Pro or Enterprise, I recommend enabling Sandbox even if you don’t think you’ll use it often. The one time you need to test an unfamiliar app or script, you’ll be glad it’s already configured and ready to go.

What are your thoughts about Windows Sandbox? Do you use it regularly, or do you prefer a traditional virtual machine? Let me know in the comments.

FAQs about turning on Windows 11 Sandbox

Here’s a list of frequently asked questions (FAQs) and answers about enabling Windows Sandbox.

What is Windows Sandbox, and what is it used for?

Windows Sandbox is a lightweight, disposable Windows environment that lets you run untrusted applications or visit risky websites without affecting your main system. Everything inside the Sandbox is isolated and deleted when you close it.

Which Windows editions support Windows Sandbox?

Windows Sandbox is available on Windows 11 and Windows 10 Pro, Enterprise, and Education editions. It is not supported on the Home edition.

Does Windows Sandbox use virtualization technology?

Yes. Windows Sandbox relies on Microsoft Hyper-V technology and requires hardware virtualization to be enabled in UEFI or BIOS before it can run.

Do I need Hyper-V enabled to use Windows Sandbox?

Yes. Hyper-V and related virtualization components are required. Enabling Windows Sandbox automatically turns on the necessary virtualization features if they are not already enabled.

Is Windows Sandbox safe to use for malware testing?

Windows Sandbox is designed for testing untrusted software in isolation. While it significantly reduces risk to the host system, it should not be considered a replacement for full malware analysis tools in high-risk or professional security scenarios.

What happens to files and apps after closing Windows Sandbox?

Everything inside Windows Sandbox is permanently deleted when you close it. Installed apps, downloaded files, and system changes do not persist between sessions.

Can I copy files between my computer and Windows Sandbox?

Yes. You can copy and paste files and text between the host system and Windows Sandbox. However, any files copied into the Sandbox are deleted when the session ends.

How much disk space does Windows Sandbox use?

The base image is around 100MB, but the actual disk usage can grow temporarily while the Sandbox is running. All used space is reclaimed when the Sandbox is closed.

Why is the Windows Sandbox option missing from Windows Features?

This usually happens if you are using Windows Home, hardware virtualization is disabled in BIOS or UEFI, or virtualization is blocked by another hypervisor configuration.

Can Windows Sandbox run on virtual machines?

Yes, but only if nested virtualization is supported and enabled on the host hypervisor. Without nested virtualization, Windows Sandbox will not start.

What is new with enabling Windows Sandbox in Windows 11 25H2?

Starting with the December 2025 Security Update for Windows 11 25H2, Windows Sandbox can also be enabled directly from the Settings app, simplifying the setup process.

Can I disable Windows Sandbox after enabling it?

Yes. You can disable it from Windows Features, PowerShell, or Command Prompt by reversing the same steps used to enable it.

Does Windows Sandbox affect system performance?

Windows Sandbox uses system resources only while running. When it is closed, there is no ongoing performance impact on the host system.

Is Windows Sandbox the same as a virtual machine?

No. While it uses virtualization technology, Windows Sandbox is a preconfigured, disposable environment that starts faster and requires less setup than a traditional virtual machine.

Update July 23, 2026: This guide has been updated to ensure accuracy and reflect changes to the process.