Windows Sandbox

Windows 11 Pro includes an optional feature called Windows Sandbox that lets you run untrusted software in an isolated, temporary, Windows 11 Desktop environment without impacting the underlying system. It's based on the same hypervisor-based hardware virtualization technology used by Hyper-V, but is more lightweight, can only run the same Windows 11 version as the PC on which it runs, and provides just a small number of apps found in a typical Windows 11 installation.

The important thing to understand about Windows Sandbox is that the Windows 11 environment it provides is temporary: every time you start Windows Sandbox, you get a pristine, new Windows 11 environment: nothing persists from session to session as on a real PC or with a Hyper-V virtual machine (VM). Windows Sandbox also doesn't need an ISO image or a virtual hard disk (VHD). Everything it needs is already there in Windows 11.
Applications or data added to Windows Sandbox will persist if you reboot the virtual version of Windows 11 it contains. But it will all be erased when you close Windows Sandbox.
Install Windows Sandbox
Windows Sandbox requires Windows 11 Pro or higher. To install this feature, use the query features in Search and select "Turn Windows features on or off" from the results list that appears. The Windows Features control panel will open.

You will see an entry for Windows Sandbox in the list. Select it and then click OK. The feature will be installed and then you will be prompted to restart the PC. Do so.
If you later choose to uninstall Windows Sandbox, you can do so via the Windows Features control panel. Just uncheck "Windows Sandbox" in the list, click OK, and restart your PC when prompted.
Get to know Windows Sandbox
Windows Sandbox couldn't be simpler: it provides a virtualized version of your Windows 11 Pro installation, but stripped down to just a basic set of apps and presented in a resizable, scaled Remote Desktop Connection (RDC) window.

If you maximize Windows Sandbox, it will display a dark header called the connection bar at the top with controls for pinning/unpinning the connection bar, connection information, Minimize, Restore, and Close.

When you close Windows Sandbox, you will be prompted about its destructive nature: any content you added or changed while using the app will be permanently lost.

Test suspicious software in Windows Sandbox
Windows Sandbox provides two general ways to test suspicious software. The first and most obvious is to use the Microsoft Edge web browser to download the software in question.

The second is to use its integration capabilities to copy a file or folder in the host OS and then paste it into Windows Sandbox. This works as expected: simply right-click the file or folder in the host OS and select "Copy" from the context menu that appears. Then, right-click the Desktop in Windows Sandbox and select "Paste."