>

Start Windows Sandbox from the command line

Launch a disposable isolated desktop with WindowsSandbox.exe for testing untrusted files.

WindowssandboxclisecurityLow risk
Run `WindowsSandbox.exe` to start a clean, isolated Windows desktop that disappears completely when closed.

01Command

Command
$ WindowsSandbox.exe

02What it does

Windows Sandbox spins up a temporary copy of Windows where software you run cannot touch your real system — everything is discarded on close. It must first be enabled as a Windows feature (the dism command in the requirements), then it starts in seconds without any virtual-machine setup. It is ideal for opening unknown attachments or trying installers from untrusted sources.

03Risk

RiskLow risk
RequirementsWindows 10/11 Pro, Enterprise or Education; enable the feature first with `dism /online /enable-feature /featurename:Containers-DisposableClientVM`.
!Warning: Files are NOT saved — anything stored inside the sandbox is deleted the moment you close it. Virtualization must be enabled in BIOS/UEFI.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • netsh
    Microsoft Learn · vendor-doc · 2026-09-17
    Evidence: Documents netsh WLAN commands including `netsh wlan show profile name=... key=clear` and `netsh wlan delete profile name=...`.
  • Windows Sandbox
    Microsoft Learn · vendor-doc · 2026-09-17
    Evidence: Windows Sandbox provides a disposable desktop environment started by running WindowsSandbox.exe.

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17
Verify File Hashes with certutil -hashfile
Windowshashcmdsecurity

Built-in Windows command to compute MD5, SHA1 or SHA-256 hashes of any file.

Low risk ✓ 2026-09-17