Registry Key to Configure Windows Sandbox

Windows Sandbox allows users to run untrusted applications in an isolated environment, and its system-wide behavior can be centrally controlled via the Windows Registry. This guide details the specific registry key path located in the Windows Registry Editor (Regedit) and explains the essential configuration values used to manage Sandbox policies such as networking, clipboard sharing, and device access.

The Windows Sandbox Registry Path

The primary registry key that manages the behavior and policy configurations for Windows Sandbox is:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox

Note: If the Sandbox key does not already exist under Windows, it can be created manually by right-clicking the Windows folder, selecting New > Key, and naming it Sandbox.

Configurable Registry Values

Within this key, several DWORD (32-bit) values can be created or modified to control specific features of Windows Sandbox. Setting a value to 1 enables the feature, while 0 disables it:

• AllowNetworking
  • Type: REG_DWORD
  • Function: Controls network access inside the Sandbox. Setting it to 0 completely disables network connectivity, isolating the instance from local networks and the internet.
• AllowClipboardRedirection
  • Type: REG_DWORD
  • Function: Manages shared clipboard functionality between the host machine and the Sandbox. Setting this to 0 blocks copying and pasting files or text between environments.
• AllowAudioInput
  • Type: REG_DWORD
  • Function: Controls microphone access. Set to 0 to prevent the Sandbox from accessing audio recording hardware.
• AllowVideoInput
  • Type: REG_DWORD
  • Function: Controls webcam and video capture device access. Set to 0 to block camera input within the virtual environment.
• AllowPrinterRedirection
  • Type: REG_DWORD
  • Function: Determines whether host printers are redirected into the Sandbox instance. Set to 0 to disable printing from the Sandbox.
• AllowVHost
  • Type: REG_DWORD
  • Function: Controls virtualized host endpoint communication.

How to Apply Changes

1. Press Win + R, type regedit, and press Enter to open the Registry Editor.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows.
3. Locate or create the Sandbox key.
4. Right-click in the right-hand pane, choose New > DWORD (32-bit) Value, and enter the name of the desired policy (e.g., AllowNetworking).
5. Double-click the newly created entry and set its value data to 0 (Disabled) or 1 (Enabled).
6. Restart the system or relaunch Windows Sandbox for the policies to take effect.