Windows Sandbox Hardening

This tool hardens Windows Sandbox, restricting local network access and disabling features commonly exploited by malware. Use this page to download the EXE or PowerShell script without exposing your internal network to the sandbox.

You can download a pre-configured Windows Sandbox launcher here. Any Sandbox launched via this file will auto-load this page, allowing you to download and run the hardening script/executable.

📌 Security Features

✅ Blocks Private Networks (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16)
✅ Disables Network Discovery and File Sharing
✅ Disables NetBIOS over TCP/IP
✅ Completely Disables IPv6 Components
✅ Blocks Remote Desktop Connections
✅ Disables Windows Script Host (Prevents VBS and JS script execution)
✅ Restricts PowerShell Execution Policy to "Restricted"
✅ Implements Software Restriction Policies
✅ Disables Registry Tools
✅ Disables Task Manager
✅ Disables Command Prompt
✅ Enables Edge SmartScreen Protection
✅ Disables JavaScript JIT Compilation in Edge
✅ Restricts Edge Downloads
✅ Blocks All Edge Extensions
✅ Disables Browser Autofill and Password Manager
✅ Enforces TLS 1.2 Minimum and Certificate Checks
✅ Implements Process Whitelisting with SHA256 Verification
✅ Generates Detailed Security Reports and Logs
✅ Verifies All Applied Settings

🔒 Download EXE 🖥️ Download PowerShell

🛡️ Windows Sandbox Hardening

📌 Security Features