Virtualization Enable or Disable vGPU Sharing for Windows Sandbox in Windows 11

Brink · Nov 4, 2022

This tutorial will show you how to enable or disable vGPU sharing for Windows Sandbox for all users in Windows 10 and Windows 11.

Windows Sandbox provides a lightweight desktop environment to safely run applications in isolation. Software installed inside the Windows Sandbox environment remains "sandboxed" and runs separately from the host machine.

A sandbox is temporary. When it's closed, all the software and files and the state are deleted. You get a brand-new instance of the sandbox every time you open the app.

Virtualized GPU (vGPU) for Windows Sandbox is enabled by default.

If you disable vGPU, Windows Sandbox will use software rendering, which can be slower than virtualized GPU.

References:

Windows Sandbox - Windows Security

Windows Sandbox overview

learn.microsoft.com

WindowsSandbox Policy CSP - Windows Client Management

Learn more about the WindowsSandbox Area in Policy CSP.

learn.microsoft.com

Windows Sandbox is only available in the Windows 10/11 Pro, Enterprise, and Education editions.

You must be signed in as an administrator to enable or disable vGPU sharing for Windows Sandbox.

Enabling virtualized GPU can potentially increase the attack surface of Windows Sandbox.

Contents

Option One: Enable or Disable vGPU Sharing for Windows Sandbox in Local Group Policy Editor
Option Two: Enable or Disable vGPU Sharing for Windows Sandbox using REG file

EXAMPLE: Notification when opening the Windows Sandbox app with vGPU sharing disabled

OPTION ONE

Enable or Disable vGPU Sharing for Windows Sandbox in Local Group Policy Editor

1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration > Administrative Templates > Windows Components > Windows Sandbox

3 In the right pane of Windows Sandbox in the Local Group Policy Editor, double click/tap on the Allow vGPU sharing with Windows Sandbox policy to edit it. (see screenshot above)

4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.

5 Enable vGPU Sharing for Windows Sandbox

This is the default setting.

A) Select (dot) Not Configured, click/tap on OK, and go to step 7 below. (see screenshot below)

6 Disable vGPU Sharing for Windows Sandbox

A) Select (dot) Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

7 Close the Local Group Policy Editor if you like.

8 If the Windows Sandbox app is currently open, then close and reopen the Windows Sandbox app to apply.

OPTION TWO

Enable or Disable vGPU Sharing for Windows Sandbox using REG file

1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.

2 Enable vGPU Sharing for Windows Sandbox

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_vGPU_sharing_for_Windows_Sandbox.reg

Download

(Contents of REG file for reference)

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox]
"AllowVGPU"=-

3 Disable vGPU Sharing for Windows Sandbox

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_vGPU_sharing_for_Windows_Sandbox.reg

Download

(Contents of REG file for reference)

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox]
"AllowVGPU"=dword:00000000

4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 If the Windows Sandbox app is currently open, then close and reopen the Windows Sandbox app to apply.

8 You could now delete the downloaded .reg file if you like.

That's it,
Shawn Brink