How to enable Windows Sandbox on Windows 11, 10

• To enable Windows Sandbox, open Settings > System > Advanced > Virtual Workspaces, and turn on “Windows Sandbox.”
• Alternatively, open Control Panel > Programs and Features > Turn Windows Features on or off, check “Windows Sandbox,” click “OK,” and restart the computer.
• You can also enable the feature with commands using Command Prompt and PowerShell.

UPDATED 12/15/2025: On Windows 11 (and 10), “Windows Sandbox” is a minimal Windows installation isolated from the main system that allows you to run untrusted applications without exposing your device or data.

Sandbox is available on the Pro and Enterprise editions of Windows, and it uses Microsoft’s Hyper-V technology to create a disposable, lightweight virtual machine on demand to run a separate kernel that separates the Windows Sandbox session from the host.

In other words, this is a small Windows 11 (or Windows 10) installation of just around 100MB, enough to run the desktop environment and test applications. You can even copy and paste files from the host to the isolated environment. Once you finish testing the application, closing the feature will delete the Sandbox environment, so every time you start the feature, you will start with a fresh Windows 11 installation.

Windows Sandbox requires virtualization support in the Unified Extensible Firmware Interface (UEFI) on Windows 11 or Windows 10, or in the Basic Input/Output System (BIOS) on Windows 10, before you can use the feature. You can use these instructions to enable hardware virtualization in the motherboard before proceeding with the steps below.

In this guide, I will show you how to enable Windows Sandbox on Windows 11 as well as in the older version of the operating system.

• Enable Windows Sandbox from Settings
• Enable Windows Sandbox from Control Panel
• Enable Windows Sandbox from PowerShell
• Enable Windows Sandbox from Command Prompt
• FAQs about turning on Windows 11 Sandbox

Enable Windows Sandbox from Settings

To enable Windows Sandbox from the Settings app, follow these steps:

1. Open Settings on Windows 11.

2. Click on System.

3. Click the Advanced page.

4. Click the Virtual Workspaces setting.

   

5. Turn on the “Windows Sandbox” toggle switch.

   

6. Click the Restart now button.

After you complete the steps, the Sandbox feature will be enabled on your computer.

The option to enable Windows Sandbox from the Settings app is available starting with the release of the December 2025 Security Update for Windows 11 25H2.

Enable Windows Sandbox from Control Panel

To enable “Windows Sandbox” to run untrusted apps on Windows 11 (or 10), follow these steps:

1. Open Control Panel.

2. Click on Program.

3. Click the Programs and Features page.

4. Click on “Turn Windows features on or off” under the “Program and Features” section.

   

5. Check the Windows Sandbox option.

   

6. Click the OK button.

7. Click the Restart now button.

After you complete the steps, you can start the app from the Start menu. 

If you want to disable the feature, you can use the same instructions, but in step 3, clear the option.

Enable Windows Sandbox from PowerShell

To enable Windows Sandbox with PowerShell commands, follow these steps:

1. Open Start.

2. Search for PowerShell, right-click the top result, and select the Run as administrator option.

3. Type the following command to enable Sandbox users and press Enter:

   Enable-WindowsOptionalFeature -Online -FeatureName "Containers-DisposableClientVM" -All

   

4. Type “Y” and press Enter to restart the computer

Once you complete the steps, the feature will be enabled and ready from the Start menu.

If you want to undo the change, you can use the same instructions, but in step 3, run the Disable-WindowsOptionalFeature -Online -FeatureName "Containers-DisposableClientVM" command.

Enable Windows Sandbox from Command Prompt

To turn on Windows Sandbox with Command Prompt commands, follow these steps:

1. Open Start.

2. Search for Command Prompt, right-click the top result, and select the Run as administrator option.

3. Type the following command to enable Windows Sandbox and press Enter:

   Dism /online /Enable-Feature /FeatureName:"Containers-DisposableClientVM" -All

   

4. Type “Y” and press Enter to restart the computer

After you complete the steps, you can start using Windows Sandbox to test apps and visit untrusted websites without affecting the main installation.

If you want to undo the change, you can use the same instructions, but in step 3, run the Dism /online /Disable-Feature /FeatureName:"Containers-DisposableClientVM" command.

To get started, open Windows Sandbox from the Start menu, and then you will be presented with a regular Windows desktop environment where you can install and run untrusted applications without affecting the current installation. When you finish closing the app, you will delete the entire virtual machine and anything you have installed.

FAQs about turning on Windows 11 Sandbox

Here’s a list of frequently asked questions (FAQs) and answers about enabling Windows Sandbox.

What is Windows Sandbox, and what is it used for?

Windows Sandbox is a lightweight, disposable Windows environment that lets you run untrusted applications or visit risky websites without affecting your main system. Everything inside the Sandbox is isolated and deleted when you close it.

Which Windows editions support Windows Sandbox?

Windows Sandbox is available on Windows 11 and Windows 10 Pro, Enterprise, and Education editions. It is not supported on the Home edition.

Does Windows Sandbox use virtualization technology?

Yes. Windows Sandbox relies on Microsoft Hyper-V technology and requires hardware virtualization to be enabled in UEFI or BIOS before it can run.

Do I need Hyper-V enabled to use Windows Sandbox?

Yes. Hyper-V and related virtualization components are required. Enabling Windows Sandbox automatically turns on the necessary virtualization features if they are not already enabled.

Is Windows Sandbox safe to use for malware testing?

Windows Sandbox is designed for testing untrusted software in isolation. While it significantly reduces risk to the host system, it should not be considered a replacement for full malware analysis tools in high-risk or professional security scenarios.

What happens to files and apps after closing Windows Sandbox?

Everything inside Windows Sandbox is permanently deleted when you close it. Installed apps, downloaded files, and system changes do not persist between sessions.

Can I copy files between my computer and Windows Sandbox?

Yes. You can copy and paste files and text between the host system and Windows Sandbox. However, any files copied into the Sandbox are deleted when the session ends.

How much disk space does Windows Sandbox use?

The base image is around 100MB, but the actual disk usage can grow temporarily while the Sandbox is running. All used space is reclaimed when the Sandbox is closed.

Why is the Windows Sandbox option missing from Windows Features?

This usually happens if you are using Windows Home, hardware virtualization is disabled in BIOS or UEFI, or virtualization is blocked by another hypervisor configuration.

Can Windows Sandbox run on virtual machines?

Yes, but only if nested virtualization is supported and enabled on the host hypervisor. Without nested virtualization, Windows Sandbox will not start.

What is new with enabling Windows Sandbox in Windows 11 25H2?

Starting with the December 2025 Security Update for Windows 11 25H2, Windows Sandbox can also be enabled directly from the Settings app, simplifying the setup process.

Can I disable Windows Sandbox after enabling it?

Yes. You can disable it from Windows Features, PowerShell, or Command Prompt by reversing the same steps used to enable it.

Does Windows Sandbox affect system performance?

Windows Sandbox uses system resources only while running. When it is closed, there is no ongoing performance impact on the host system.

Is Windows Sandbox the same as a virtual machine?

No. While it uses virtualization technology, Windows Sandbox is a preconfigured, disposable environment that starts faster and requires less setup than a traditional virtual machine.

Update December 15, 2025: This guide has been updated to ensure accuracy and reflect changes to the process.