Policy

Allow mapping folders into Windows Sandbox

This policy setting enables or disables mapping folders into sandbox. If you enable this policy setting, mapping folders from the host into Sandbox will be permitted. If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files. If you disable this policy setting, mapping folders from the host into Sandbox will not be permitted. If you do not configure this policy setting, mapped folders will be enabled. Note that there may be security implications of exposing folders from the host into the container.

Policy
Pack Microsoft Windows
Category Windows Components / Windows Sandbox
Policy ID ae97c313a75f
Internal name AllowMappedFolders

Registry

Copy registry mappings

HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowMappedFolders (enabled) = 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowMappedFolders (disabled) = 0
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sandbox\AllowWriteToMappedFolders

Policy notes

This policy setting enables or disables mapping folders into sandbox. If you enable this policy setting, mapping folders from the host into Sandbox will be permitted. If you enable this policy setting and disable write to mapped folders, mapping folders from the host into Sandbox will be permitted, but Sandbox will only have permission to read the files. If you disable this policy setting, mapping folders from the host into Sandbox will not be permitted. If you do not configure this policy setting, mapped folders will be enabled. Note that there may be security implications of exposing folders from the host into the container.

Related policies