How to Use Windows Sandbox to Test Untrusted Software Safely

What Causes This?

The problem is simple: running untrusted software directly on your main Windows installation can expose your PC to malware, unwanted system changes, and privacy risks. Even legitimate-looking installers can bundle adware, create startup entries, or modify files and settings without making it obvious.

Windows Sandbox helps by launching a temporary, isolated copy of Windows where you can test software safely. If the app turns out to be harmful or suspicious, you can close the sandbox and everything inside it is deleted.

Common Symptoms

• You need to test an unknown app, installer, script, or attachment without risking your main PC
• You are not sure whether a download is safe, but still want to inspect how it behaves
• You want a quick disposable Windows environment without setting up a full virtual machine
• You are troubleshooting software that may change system settings, registry entries, or startup items
• You want a safer way to open files from untrusted sources

How to Fix It Manually

1. Check whether your PC supports Windows Sandbox

   • Press Windows + I to open Settings.
   • Go to System > About and confirm you are using a supported edition such as Windows 10/11 Pro, Enterprise, or Education.
   • Make sure virtualization is enabled on your PC. Press Ctrl + Shift + Esc to open Task Manager, then select the Performance tab and click CPU. Look for Virtualization: Enabled.

2. Turn on Windows Sandbox

   • Press Windows + S, type windows features, and click Turn Windows features on or off.
   • Scroll down and check Windows Sandbox.
   • Click OK and let Windows install the required files.
   • Restart your PC when prompted.

3. Open Windows Sandbox

   • Press Windows + S, type Windows Sandbox, and open it.
   • Wait while Windows creates the temporary isolated desktop. This may take a minute the first time.

4. Move the untrusted file into the sandbox

   • On your main desktop, locate the file you want to test.
   • Copy it with Ctrl + C.
   • Click inside the Windows Sandbox window and paste it with Ctrl + V.
   • You can also download the file directly inside Sandbox if you prefer not to transfer it from your main system.

5. Test the software carefully

   • Run the app or installer inside Sandbox, not on your main desktop.
   • Watch for suspicious behavior such as unexpected pop-ups, requests for admin access, browser changes, or extra software being installed.
   • If you want to inspect changes, open Task Manager inside Sandbox with Ctrl + Shift + Esc and review running processes.

6. Close Sandbox to remove everything

   • When you are done, close the Windows Sandbox window.
   • Windows will warn you that all content inside Sandbox will be discarded.
   • Click OK. This deletes the temporary environment and any changes made by the software.

7. Use good judgment even with Sandbox

   • Do not sign in to sensitive accounts inside Sandbox unless necessary.
   • Do not copy unknown files back to your main PC unless you trust them after testing.
   • If the software looks suspicious, delete the original file from your main system too.

Fix It Automatically with Kudu

Kudu helps keep your PC safer by identifying risky startup items, unnecessary background apps, and system clutter that can appear after testing software or dealing with suspicious downloads. It gives you a faster way to clean up and optimize Windows without digging through multiple settings screens yourself.

Download Kudu Free →