Windows Sandbox (WSB) is a useful built-in virtualization tool that is accessible in Windows 11 Pro, Enterprise, and Education. This program is useful for running untrusted applications in a computer environment without affecting the host system.
By default, WSB allows audio input, which means applications running in the sandbox can access the microphone. This is useful for testing software that requires voice commands, audio recording, or microphone usage.
However, there are specific situations where you should disable audio input in Windows Sandbox. For example, having microphone access is not ideal if you are running untested software, but it may be necessary when testing apps that need audio access. Thankfully, you can change this setting through Windows Settings, Group Policy Editor, and Registry Editor without having to enable or disable your computer’s microphone.
Methods to configure audio input in Windows Sandbox
📌 Prerequisites:
- Your computer needs to be running Windows 11 Pro, Enterprise, or Education edition. WSB is unavailable on Windows Home.
- You need administrator privileges to configure system settings.
- Make sure you have access to the Local Group Policy Editor (for Pro, Enterprise, and Education).
- WSB must be enabled in Windows Features. Access this option via Control Panel > Programs > Turn Windows features on or off, then check Windows Sandbox.
📌 Recommended deployment strategies:
| Click to Choose a Method | 💻 Best for Individual Users | 💻💻💻 Best for Enterprises |
| Method 1: Windows Settings | ✓ | x |
| Method 2: Group Policy Editor | ✓ | ✓ |
| Method 3: Registry Editor | x | ✓ |
Method 1: Enable or disable audio input in Windows Sandbox via Windows Settings
📌 Use Cases:
- This can be used on developer machines where users may want to control audio access per session.
- You can ideally use this to test applications in WSB that rely on voice input.
📌 Prerequisites:
- You need to have Windows 11 build 27686.1000 or later.
- You will not need admin privileges to toggle this setting, but you must have elevated permissions to launch WSB.
Follow these steps to enable or disable audio input in WSB via Settings:
- Open Windows Sandbox.
- Next, look for and click on the three-dot menu in the upper-right corner of the Sandbox window.
- Find and select the Audio Input option and toggle it:
- Choose On to allow audio input in Windows Sandbox.
- Select Off to block audio input.
- Close and reopen Windows Sandbox to apply the change.
Method 2: Toggle audio input in Windows Sandbox using the Group Policy Editor
📌 Use Cases:
- If you are an IT admin, you can use this to configure Windows 11 Sandbox settings in domain-joined systems.
- Useful for enabling or disabling audio input across all Sandbox sessions to meet security policies.
📌 Prerequisites:
- You can only utilize this method in Windows Pro, Enterprise, and Education.
- Tweaking the Group Policy requires administrator privileges.
Here’s how to configure audio input in WSB via the Group Policy Editor:
- First, open the Group Policy Editor. Here’s how:
- Press Win + R to open the Run dialog.
- Type gpedit.msc and press Enter.
- On the left-hand side of the window, head to: Computer Configuration > Administrative Templates > Windows Components > Windows Sandbox.
- Double-click Allow audio input in Windows Sandbox in the right-hand pane.
- Next, in the policy settings window, select one of the following:
- Enabled – allow audio input in Windows Sandbox
- Disabled – disallow audio input
- Not Configured – Default behavior applies (audio input allowed)
- Click Apply, then OK.
Method 3: Using the Registry Editor to tweak audio input in Windows Sandbox
📌 Use Cases:
- IT admins and users can use this method for computers without Group Policy access.
- Ideal for advanced users or IT technicians setting up test environments.
📌 Prerequisites:
- To configure the registry, you will need administrator privileges.
- The device that must be configured must be running Windows 11 version 24H2 or later.
Use these steps to change your audio input settings in WSB:
- Open the Windows Registry.
- Press Win + R to open the Run dialog.
- Type regedit, and press Enter.
- Next, navigate to the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox
- Sometimes, the Sandbox key may not exist in the Windows path. You can manually create it using the following steps:
- Right-click the Windows key.
- Pick New > Key.
- Name it Sandbox.
- Next, in the right-hand pane, right-click and choose New > DWORD (32-bit) Value. Name it AllowAudioInput.
- Double-click the new value and set the Value data (set to Decimal) to:
- 1 = This will allow audio input in Windows Sandbox.
- 0 = This will disable audio input in Windows Sandbox.
- Click OK, then close the Registry Editor.
⚠️ Warning: Be sure to follow the steps precisely, given that modifying the Windows Registry incorrectly can cause system issues.
⚠️ Things to look out for
| Risks | Potential Consequences | Reversals |
| Editing the wrong registry key or doing it incorrectly | This could break Sandbox audio and affect unrelated settings. | Verify the path and correct invalid keys. Just in case, you can back up and restore your Registry. |
| Group Policy changes have no effect | Audio input tweaks may not occur. | Double-check the changes, verify, and run gpupdate /force. |
| Overriding user settings | This will prevent users from toggling Sandbox audio in the interface. | Be sure to communicate changes to users, especially in managed environments. |
Additional considerations when toggling audio input in Windows Sandbox
Disabling audio input increases security
By turning off audio input, you will help protect the host computer from potentially malicious applications trying to access the microphone. This is crucial in environments that require enhanced security and privacy.
Enabling audio input is necessary for testing applications that require microphone access
If you’re testing applications that require voice input, speech recognition, or audio, enable audio input in the app. However, ensure you’ll only turn it on for trusted programs and scenarios.
Group Policy and Registry changes affect all users
When audio input in Windows Sandbox is configured using the Group Policy or Registry Editor, the setting applies throughout the system. It will override user-level tweaks and prevent users from changing the setting inside the Sandbox settings.
Enforce a consistent policy across settings
In enterprise and managed environments, be sure to apply the same configuration across all computers. This will ensure that the computers will behave consistently.
Restart the Sandbox when making changes
Note that audio input changes will not be implemented until WSB is closed and reopened. On certain occasions, especially after a Registry edit, you may need to perform a full system restart.
Configure audio input to match workplace needs and security
Tweaking audio input in Windows Sandbox adds a layer of security in lab and testing environments, which can be deactivated if necessary. There are several straightforward means to approach this task, from Windows Settings to the system-wide Group Policy and Registry Editor methods. You can implement these easily, whether you’re configuring a setting for an individual device or for an entire fleet of computers in a managed environment.
Related topics:
