Windows Sandbox Registry Keys for Network and Clipboard

This article outlines how to locate and configure the master Group Policy registry keys for Windows Sandbox to manage networking and clipboard sharing features. By modifying specific DWORD values within the Windows Registry, administrators can enforce system-wide security restrictions on sandbox sessions, overriding individual user configuration files.

The Master Policy Registry Key

The master policies governing Windows Sandbox behavior are stored in the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox

If the Sandbox key does not exist under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows, it can be created manually to enforce these policies.

Specific Values for Networking and Clipboard Access

To control networking and clipboard access, two specific 32-bit DWORD values are configured inside this key:

• Networking Access Policy:
  • Value Name: AllowNetworking
  • Type: REG_DWORD
  • Value Data:
    • 0 = Disabled (network access is completely blocked inside the sandbox)
    • 1 = Enabled (network access is permitted, which is the default behavior)
• Clipboard Redirection Policy:
  • Value Name: AllowClipboardRedirection
  • Type: REG_DWORD
  • Value Data:
    • 0 = Disabled (copying and pasting between the host and sandbox is blocked)
    • 1 = Enabled (shared clipboard access is permitted, which is the default behavior)

Applying the Changes

Once these values are created or modified under the policy key, any newly launched instance of Windows Sandbox will immediately inherit the restrictions. A system restart is typically not required, but running instances of Windows Sandbox must be closed and reopened for the registry changes to take effect.