How to Enable or Disable Networking in Windows Sandbox

Windows Sandbox networking allows administrators to safely test suspicious apps in a virtual environment with internet access. Sandbox networking is enabled by default, but you may want to disable it to run fully isolated simulations or shield your network from malware.

This article explains how to disable or enable your network on Windows Sandbox, the key points for deployment, and commonly asked questions.

Configure Sandbox networking for secure online testing

Knowing the most optimal way to turn Windows Sandbox networking on or off can depend on your goals, your technical limitations, and many other factors. Be sure to consider these before choosing a method.

📌 Prerequisites:

• Requires Windows 11 Pro or Enterprise (Build 18305 or later)
• Windows Sandbox must be enabled via Windows Features
• Administrator privileges

📌 Recommended deployment strategies:

Method 1: Disable networking via configuration file (per instance)

This method is ideal if system-wide policy changes aren’t necessary, and it works by creating a launch file that has networking disabled.

📌 Use Cases: Per-session changes.

1. Press Win + S, type Notepad, and press Enter.
2. Paste the following:
   <Configuration><Networking>Disable</Networking></Configuration>
3. Save the file with a .wsb extension (e.g., Sandbox-NetworkingOff.wsb).
4. Run the file to launch Windows Sandbox without network access.

Method 2: Configure networking via Group Policy

To update your enterprise’s policy surrounding Windows Sandbox networking, set changes using Group Policy Editor (gpedit.msc).

📌 Use Cases: Enforce security standards by allowing or denying app settings changes.

📌Prerequisites: Group Policy with Windows 11 ADMX templates.

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to: Computer Configuration > Administrative Templates > Windows Components > Windows Sandbox
3. Double-click Allow networking in Windows Sandbox.
   • To allow networking inside Sandbox (default), choose Enabled.
   • To prevent networking access inside the Sandbox, choose Disabled.
   • To enable networking unless a configuration file explicitly overrides it, choose Not Configured.
4. Click Apply, then OK.
5. Run gpupdate /force or reboot the workstation to apply your changes.

Method 3: Configure via Registry Editor

⚠️ Warning: Editing the registry can cause system issues. Create a backup before proceeding.

📌 Use Cases: System-wide changes that impact all users on a workstation.

1. Press Win + R, type regedit, and press Enter.
2. Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox
3. Double-click the Sandbox key.
   • If you don’t see the key, do the following:
     1. Right-click on the right-hand panel.
     2. Select New > DWORD (32-bit) value.
     3. Name the new value AllowNetworking.
4. Modify its value:
   • To enable networking in Sandbox, type 1.
   • To disable networking in Sandbox, type 0.
5. Close the Registry Editor and restart the system.

Method 4: PowerShell script for automation

📌 Use Cases: Deploy specific scripts that automate Registry changes, saving time and resources.

1. Press Win + R, type powershell, and press Enter.
2. To disable Windows Sandbox networking, run this script:
   

   New-Item -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox” -Force | Out-Null Set-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox” -Name “AllowNetworking” -Value 0

3. To enable Windows Sandbox networking, run this script:
   

   Set-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox” -Name “AllowNetworking” -Value 1

Method 5: Using a .reg file

📌 Use Cases: Apply Registry changes through commands contained in plain-text files.

1. Press Win + S, type Notepad, and press Enter.
2. To disable Windows Sandbox networking, paste this script:
   

   Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox] “AllowNetworking”=dword:00000000

3. To enable Windows Sandbox networking, paste this script:
   

   Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox] “AllowNetworking”=dword:00000001

4. Save the file with a .reg extension (e.g., Sandbox_NetworkingOff.reg).
5. Run the file as Administrator.
6. Restart the PC.

⚠️ Things to look out for

Additional considerations when toggling Windows Sandbox networking

It’s important to consider how your changes can affect different parts of your system in order to optimize your process and avoid pitfalls. Here are the key points you should keep in mind.

Configuration files override Windows Sandbox networking settings

Windows Sandbox supports .wsb configuration files (XML), which empower IT admins to enable or disable features like networking, mapped folders, logon commands, and more. This is useful if your goal is to disconnect your sandbox from the internet, preventing potential data leaks.

No internet means no updates

Keep in mind that disabling Windows Sandbox networking also means losing Windows Update or any online services in your test environment. While this can illustrate how these apps behave offline, real-time updates won’t be available in your sandbox.

Data loss

Windows Sandbox sessions get deleted after every session. This means that you’ll be unable to upload diagnostic data reports to the cloud if you turn networking off.

Audit access

On the other hand, it’s important to stress that sandboxed apps can potentially access your internal network, exposing your organization’s resources. To improve your security posture, safeguard your audit-sensitive endpoints.

Manage Windows Sandbox networking for increased protection

Windows Sandbox allows users to run potentially unsafe apps within virtual instances. Internet access is permitted by default for improved simulations, but it exposes your company’s LAN, increasing potential attack vectors.

Toughen your security posture by disabling Windows Sandbox networking and limiting its use. When making changes, exercise caution, create registry backups when needed, and prioritize your IT infrastructure’s overall stability.

Related topics:

• What Is a Sandbox?
• How to Enable or Disable vGPU Sharing for Windows Sandbox in Windows 10
• How to Enable or Disable Clipboard Sharing with Windows Sandbox in Windows 10