How to Enable Windows Sandbox on Windows 11- Step By Step Guide


Staff member
Aug 14, 2021

Windows Sandbox in windows 11 tutorial​

Windows Sandbox: an isolated, temporary, desktop environment where you can run untrusted software without the fear of lasting impact to your PC. Any software installed in Windows Sandbox stays only in the sandbox and cannot affect your host. Once Windows Sandbox is closed, all the software with all its files and state are permanently deleted.

Windows Sandbox has the following properties:​

Part of Windows – everything required for this feature ships with Windows 10 ,Windows 11 Pro and Enterprise. No need to download a VHD!
Pristine – every time Windows Sandbox runs, it’s as clean as a brand-new installation of Windows
Disposable – nothing persists on the device; everything is discarded after you close the application
Secure – uses hardware-based virtualization for kernel isolation, which relies on the Microsoft’s hypervisor to run a separate kernel which isolates Windows Sandbox from the host
Efficient – uses integrated kernel scheduler, smart memory management, and virtual GPU
Due to this implementation, you cannot directly run an app in Windows Sandbox. You must install it inside the Sandbox before running it. Apps you have already installed on your host machine are not accessible from within the Sandbox.

Step by Step Guide to enable the Windows Sandbox feature in Windows 11.​

Press the Win + R shortcut keys and type optionalfeatures.exe into the Run dialog. Hit Enter.

Place the check mark next to the Windows Sandbox option to enable it and click OK.

Close the Windows Features dialog box. next it will update features of windows.

Windows need to Restart the OS to apply the changes.


Done! You can use Sandbox after restarting. See below for instructions on how to use it. But before we get started, there is one more method to enable the Sandbox feature.

Turn on Windows Sandbox with DISM​

In Windows Search (Win+S), type cmd.

Look for the Command Prompt item and then select Run as Administrator.
Type the following command to enable the Sandbox:
dism /online /Enable-Feature /FeatureName:"Containers-DisposableClientVM" -All.

Restart the OS if prompted to apply the change.

Finally, the undo command to disable the feature is:
dism /online /Disable-Feature /FeatureName:"Containers-DisposableClientVM".


Now, let's see how to use Windows Sandbox to start an app using it.

How to use Windows Sandbox​

Open the Start menu and find Windows Sandbox in apps. 7.jpg
Click its icon and confirm the UAC prompt to run it.
Copy the app you want to run it, e.g. some installer or executable file, on the host machine.
Switch to the Windows Sandbox window and paste the file. Also, you can directly download a file using the Edge browser in the Sandbox session. 11.1.jpg
Run the app in Sandbox by clicking on the file you just paste or downloaded. 12.1.jpg
After you checked and tested the app, you can just close the Sandbox window. Its session will be removed, and all the associated data will be destroyed. 12.jpg
Finally , Sandbox is not available in home editions of Windows 11.If you want to use this feature you need to upgrade your license to Pro and Enterprise versions of the OS.
Last edited: