How to Enable or Disable Sharing Host Folders with Windows Sandbox in Windows 11
Sharing host folders with Windows Sandbox lets you access files from your main computer inside the Sandbox’s isolated environment in Windows 11.
Windows Sandbox creates a temporary, safe place on your PC for running apps you don’t fully trust. This keeps your main Windows system protected from potential viruses or errors.
This handy feature, available since Windows 11 build 27686.1000, lets you move files back and forth between your real computer and the Sandbox.
This guide shows you exactly how to turn this sharing feature on or off so you can decide what files the Sandbox can see from your PC.
To enable or disable sharing folders with Windows Sandbox, use either the Group Policy Editor or Registry Editor. In Group Policy, navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Windows Sandbox and adjust “Allow mapping folders into Windows Sandbox.” In the Registry, go to 🗝️HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox and modify AllowMappedFolders and AllowWriteToMappedFolders.
Turn on or off the Share folder with Sandbox feature on Windows
As mentioned, users can share folders with the Windows sandbox environment using the improved client.
Here’s how to enable or disable this feature.
First, open the Local Group Policy Editor (gpedit.msc). You can search for “Edit group policy” on the Start menu.
Then, navigate the folders below:
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Sandbox
In the Group Policy details pane on the right, locate and double-click the “Allow mapping folders into Windows Sandbox” settings.
On the “Allow mapping folders into Windows Sandbox” window, set the option to Not Configured, Enabled, or Disabled.
- Not Configured (default)
- Enabled – Mapping folders from the host into Sandbox will be permitted.
- Disabled – Mapping folders from the host into Sandbox will not be permitted.
Sandbox can also write to a mapped folder if you select the settings under Options.
Click OK to save your changes. You need to reboot your device to apply the settings.
Enable or disable the Sandbox folder-sharing feature using the Windows Registry Editor
Another way to enable or disable the Sandbox sharing feature is to use the Windows Registry editor.
First, open the Windows Registry editor (regedit.exe) and navigate to the following folder key path.
ComputerHKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsSandbox
Next, double-click these two (REG_DWORD) names on the Sandbox key’s right pane to open them.
AllowMappedFolders
AllowWriteToMappedFolders
Enter a value of 0 for both to disable the Sandbox folder-sharing feature in Windows.
If the two items aren’t visible, right-click a blank area and create a new DWORD (32-bit) registry item for each.
Then, enter a value of 0 for both to disable folder sharing.
Delete both items created above to restore the default behavior and allow Sandbox folder sharing with the host.
AllowMappedFolders
AllowWriteToMappedFolders
Save your changes and restart your computer to apply them.
This completes the process!
Conclusion:
- Enabling or disabling the Windows Sandbox host-sharing feature in Windows 11 requires modifying group policy settings through the Local Group Policy Editor or registry settings via the Windows Registry Editor.
- Users can choose to allow or disallow mapping folders into Windows Sandbox, as well as the ability for Sandbox to write to a mapped folder, providing control over the extent of folder-sharing functionality.
- It is important to reboot the device after making changes in the group policy settings for them to take effect, while modifications in the registry settings also necessitate a computer restart.
- These methods allow users to manage shared folders’ security and access control within the Windows Sandbox environment, contributing to a more secure and customized user experience.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
[…] new feature that lets you share folders on the host computer with a sandbox environment was added. You can turn off using this feature in Windows, […]