Allow mapping folders into Windows Sandbox

Policy ID
AllowMappedFolders
Scope
Computer Configuration
Supported on
At least Windows 11 Pro, Enterprise, or Education with Windows Sandbox
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Windows Sandbox

Description


This policy setting enables or disables mapping folders into sandbox.

If you enable this policy setting, mapping folders from the host into Sandbox will be permitted.

If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files.

If you disable this policy setting, mapping folders from the host into Sandbox will not be permitted.

If you do not configure this policy setting, mapped folders will be enabled.

Note that there may be security implications of exposing folders from the host into the container.

Options

The empty box and the checked box tell the checkbox items of the Group Policy editor apart (a checked box is an item that is selected by default).

  • Allow Sandbox to write to mapped folders.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowMappedFoldersREG_DWORD
  • AllowWriteToMappedFoldersREG_DWORD

Other policies in the same category

View all policies in this category (7)