superrob1500
/
mirror-Windows-Sandbox-Tools
mirror of https://github.com/ThioJoe/Windows-Sandbox-Tools
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update comments in default config file 

Re-arranged and updated comments in the MyDefaultSandbox.wsb file.
pull/2/head
ThioJoe 2025-08-06 18:38:19 -07:00
parent 7583c90d48
commit 8f13ff67e3
No known key found for this signature in database
GPG Key ID: 2E328FE64CC3898C
1 changed files with 14 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
Sandbox Configurations/MyDefaultSandbox.wsb
View File

@ -1,10 +1,12 @@
<Configuration>
<!-- Docs say this may affect ability to copy and paste, but that still seems to work -->
<ProtectedClient>Enable</ProtectedClient>
<Networking>Enable</Networking>
<!-- Basic Options -->
<Networking>Enable</Networking> <!-- Enable or Disable network access -->
<MemoryInMB>12288</MemoryInMB> <!-- Adjust allocated memory as desired. Default is only 4GB -->
<ClipboardRedirection>Enable</ClipboardRedirection> <!-- Enables or disables sharing clipboard between host & sandbox. Disable if security is paramount. -->
<!-- Security Hardens the sandbox. The docs say this may affect ability to copy and paste, but that still seems to work. So I keep it enabled. -->
<ProtectedClient>Enable</ProtectedClient>
<!-- Options for improved security -->
<VideoInput>Disable</VideoInput>
@ -12,35 +14,25 @@
<PrinterRedirection>Disabled</PrinterRedirection>
<vGPU>Disable</vGPU>
<!-- Enables or disables sharing of the host clipboard with the sandbox. (Disable / Default) -->
<ClipboardRedirection>Enable</ClipboardRedirection>
<!-- Allow read only access to folder on host -->
<!-- Map a folder on your main system to appear within the sandbox -->
<MappedFolders>
<!-- Create a read-only folder mapped to a folder on host -->
<!-- Desktop "HostShared" Folder. Put startup script and other useful scripts into. -->
<MappedFolder>
<!-- Update the HostFolder path to the one on your real computer that will be shared with the Sandbox -->
<HostFolder>B:\Caches\Sandbox_Share</HostFolder>
<SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\HostShared</SandboxFolder>
<!-- Whether or not to set the mapped folder ReadOnly - Aka don't allow the Sandbox to change anything in the mapped folder -->
<ReadOnly>true</ReadOnly>
<HostFolder>B:\Caches\Sandbox_Share</HostFolder> <!-- Update the HostFolder path to the one on your real computer that will be shared with the Sandbox -->
<SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\HostShared</SandboxFolder> <!-- Don't change this, the startup script uses hardcoded paths -->
<ReadOnly>true</ReadOnly> <!-- If Readonly is True, the sandbox can't change anything the folder (recommended) -->
</MappedFolder>
</MappedFolders>
<!-- Run the powershell script from the mapped folder -->
<LogonCommand>
<Command>powershell -executionpolicy Bypass -command "start powershell {-file C:\Users\WDAGUtilityAccount\Desktop\HostShared\SandboxStartup.ps1 -launchingSandbox}"</Command>
<!-- Use this one below instead if you want the powershell window to not close after running the script -->
<!-- <Command>powershell -executionpolicy Bypass -command "start powershell {-noexit -file C:\Users\WDAGUtilityAccount\HostShared\SandboxStartup.ps1}"</Command> -->
</LogonCommand>
</Configuration>
</Configuration>
<!-- Other Settings Examples
See: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file
Anything outside <configuration> tags don't apply
More secure but no clipboard sharing
<ProtectedClient>Disable</ProtectedClient>
- See: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file
- Note: Anything outside <configuration> tags don't apply
-->