Policy

Allow mapping folders into Windows Sandbox

This policy setting enables or disables mapping folders into sandbox. If you enable this policy setting, mapping folders from the host into Sandbox will be permitted. If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files. If you disable this policy setting, mapping folders from the host into Sandbox will not be permitted. If you do not configure this policy setting, mapped folders will be enabled. Note that there may be security implications of exposing folders from the host into the container.

Policy
PackMicrosoft Windows
CategoryWindows Components / Windows Sandbox
Policy IDae97c313a75f
Internal nameAllowMappedFolders

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowMappedFolders (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowMappedFolders (disabled) = 0
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowWriteToMappedFolders

Policy notes

This policy setting enables or disables mapping folders into sandbox. If you enable this policy setting, mapping folders from the host into Sandbox will be permitted. If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files. If you disable this policy setting, mapping folders from the host into Sandbox will not be permitted. If you do not configure this policy setting, mapped folders will be enabled. Note that there may be security implications of exposing folders from the host into the container.

Related policies