From 8f13ff67e3383103f62b33d2c87cec0e85c2e2fa Mon Sep 17 00:00:00 2001
From: ThioJoe <12518330+ThioJoe@users.noreply.github.com>
Date: Wed, 6 Aug 2025 18:38:19 -0700
Subject: [PATCH] Update comments in default config file

Re-arranged and updated comments in the MyDefaultSandbox.wsb file.
---
 Sandbox Configurations/MyDefaultSandbox.wsb | 36 ++++++++-------------
 1 file changed, 14 insertions(+), 22 deletions(-)

diff --git a/Sandbox Configurations/MyDefaultSandbox.wsb b/Sandbox Configurations/MyDefaultSandbox.wsb
index 1f84b1f..b92c1fe 100644
--- a/Sandbox Configurations/MyDefaultSandbox.wsb	
+++ b/Sandbox Configurations/MyDefaultSandbox.wsb	
@@ -1,10 +1,12 @@
 <Configuration>
-
-	<!-- Docs say this may affect ability to copy and paste, but that still seems to work -->
-	<ProtectedClient>Enable</ProtectedClient>
 	
-	<Networking>Enable</Networking>
+	<!-- Basic Options -->
+	<Networking>Enable</Networking> <!-- Enable or Disable network access -->
 	<MemoryInMB>12288</MemoryInMB> <!-- Adjust allocated memory as desired. Default is only 4GB -->
+	<ClipboardRedirection>Enable</ClipboardRedirection>  <!--  Enables or disables sharing clipboard between host & sandbox. Disable if security is paramount. -->
+	
+	<!-- Security Hardens the sandbox. The docs say this may affect ability to copy and paste, but that still seems to work. So I keep it enabled. -->
+	<ProtectedClient>Enable</ProtectedClient> 
 	
 	<!-- Options for improved security -->
 	<VideoInput>Disable</VideoInput>
@@ -12,35 +14,25 @@
 	<PrinterRedirection>Disabled</PrinterRedirection>
 	<vGPU>Disable</vGPU>
 
-	<!--  Enables or disables sharing of the host clipboard with the sandbox. (Disable / Default) -->
-	<ClipboardRedirection>Enable</ClipboardRedirection>
 	
-	<!--  Allow read only access to folder on host -->
+	<!--  Map a folder on your main system to appear within the sandbox  -->
 	<MappedFolders>
-		<!--  Create a read-only folder mapped to a folder on host -->
+		<!-- Desktop "HostShared" Folder. Put startup script and other useful scripts into. -->
 		<MappedFolder>
-		  <!-- Update the HostFolder path to the one on your real computer that will be shared with the Sandbox -->
-		  <HostFolder>B:\Caches\Sandbox_Share</HostFolder>
-		  <SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\HostShared</SandboxFolder>
-		  <!-- Whether or not to set the mapped folder ReadOnly - Aka don't allow the Sandbox to change anything in the mapped folder -->
-		  <ReadOnly>true</ReadOnly>
+		  <HostFolder>B:\Caches\Sandbox_Share</HostFolder> <!-- Update the HostFolder path to the one on your real computer that will be shared with the Sandbox -->
+		  <SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\HostShared</SandboxFolder> <!-- Don't change this, the startup script uses hardcoded paths -->
+		  <ReadOnly>true</ReadOnly> <!-- If Readonly is True, the sandbox can't change anything the folder (recommended) -->
 		</MappedFolder>
 	</MappedFolders>
 
 	<!-- Run the powershell script from the mapped folder -->
 	<LogonCommand>
 		<Command>powershell -executionpolicy Bypass -command "start powershell {-file C:\Users\WDAGUtilityAccount\Desktop\HostShared\SandboxStartup.ps1 -launchingSandbox}"</Command>
-		<!-- Use this one below instead if you want the powershell window to not close after running the script -->
-		<!-- <Command>powershell -executionpolicy Bypass -command "start powershell {-noexit -file C:\Users\WDAGUtilityAccount\HostShared\SandboxStartup.ps1}"</Command> -->
 	</LogonCommand>
 
-</Configuration>
-
+</Configuration> 
 
 <!-- Other Settings Examples
-See: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file
-Anything outside <configuration> tags don't apply
-
-More secure but no clipboard sharing
-<ProtectedClient>Disable</ProtectedClient>
+	- See: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file
+	- Note: Anything outside <configuration> tags don't apply
 -->