isolated environment

Windows 11 features Smart App Control to block untrusted applications and includes Windows Sandbox, a lightweight virtual machine that provides an isolated desktop environment for safely executing applications. Windows Sandbox uses container technology and hypervisor-based virtualization to mitigate risks associated with untrusted software. It ensures that each session starts fresh, with no data persisting after closing, and applications installed on the host system are not accessible within the Sandbox. Starting with Windows 11 version 22H2, data can persist through restarts initiated within the Sandbox. Windows Sandbox is included in supported Windows editions such as Pro, Enterprise, and Education, and offers quick launch times, a lower memory footprint, and a secure environment for testing untrusted software. Setting up Windows Sandbox involves searching for it in the Start menu, running it as an administrator, and transferring executable files for installation within the Sandbox.