This tutorial will show you how to enable or disable the ability to share host folders in Windows Sandbox for all users in Windows 11.
Windows Sandbox provides a lightweight desktop environment to safely run applications in isolation. Software installed inside the Windows Sandbox environment remains "sandboxed" and runs separately from the host machine.
A sandbox is temporary. When it's closed, all the software and files and the state are deleted. You get a brand-new instance of the sandbox every time you open the app.
You can use a Windows Sandbox configuration (.wsb) file to share folders from the host with read or write permissions.
Starting with Windows 11 build 27686.1000 (Canary), this build includes the new Windows Sandbox Client Preview that is now updated via the Microsoft Store. As part of this preview, Microsoft is introducing runtime clipboard redirection, audio/video input control, and the ability to share folders with the host at runtime. You can access these via the new “…” icon at the upper right on the app. Additionally, this preview includes a super early version of command line support (commands may change over time). You can use ‘wsb.exe –help’ command for more information.
Reference:
WindowsSandbox Policy CSP
Learn more about the WindowsSandbox Area in Policy CSP.
learn.microsoft.com
You must be signed in as an administrator to enable or disable sharing host folders with Windows Sandbox.
Contents
- Option One: Enable or Disable Share Host Folders with Windows Sandbox in Local Group Policy Editor
- Option Two: Enable or Disable Share Host Folders with Windows Sandbox using REG file
EXAMPLE: "Share folders" enabled and disabled in Windows Sandbox
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)
Computer Configuration > Administrative Templates > Windows Components > Windows Sandbox
3 In the right pane of Windows Sandbox in the Local Group Policy Editor, double click/tap on the Allow mapping folders into Windows Sandbox policy to edit it. (see screenshot above)
4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.
5 Enable Share Host Folders with Windows Sandbox
This is the default setting.
A) Select (dot) Not Configured, click/tap on OK, and go to step 7 below. (see screenshot below)
6 Disable Share Host Folders with Windows Sandbox
A) Select (dot) Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)
7 Close the Local Group Policy Editor if you like.
8 If the Windows Sandbox app is currently open, then close and reopen the Windows Sandbox app to apply.
1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.
2 Enable Share Host Folders with Windows Sandbox
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Enable_host_folder_sharing_with_Windows_Sandbox.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox]
"AllowMappedFolders"=-
"AllowWriteToMappedFolders"=-3 Disable Share Host Folders with Windows Sandbox
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Disable_host_folder_sharing_with_Windows_Sandbox.reg
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox]
"AllowMappedFolders"=dword:00000000
"AllowWriteToMappedFolders"=dword:000000004 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 If the Windows Sandbox app is currently open, then close and reopen the Windows Sandbox app to apply.
8 You could now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
