deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-16 10:53:43 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Learn Editor: Update windows-sandbox-configure-using-wsb-file.md

Browse Source
This commit is contained in:
FernandoVSantos
2023-06-07 15:31:26 -07:00
parent ffa5cacca9
commit 23d3cfad08
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file.md
View File

@ -156,14 +156,16 @@ Supported values:
### Protected client ### Protected client
Applies more security settings to the sandbox Remote Desktop client, decreasing its attack surface. When Protected Mode is enabled, Sandbox adds a new layer of security boundary by running in an [AppContainer Isolation](/windows/win32/secauthz/appcontainer-isolation) execution environment.
The AppContainer Isolation provides isolation of Credentil, Device, File, Network, Process, and Window.
`<ProtectedClient>value</ProtectedClient>` `<ProtectedClient>value</ProtectedClient>`
Supported values: Supported values:
- *Enable*: Runs Windows sandbox in Protected Client mode. If this value is set, the sandbox runs with extra security mitigations enabled. - *Enable*: Runs Windows sandbox in Protected Client mode. If this value is set, the Sandbox runs in AppContainer Isolation.
- *Disable*: Runs the sandbox in standard mode without extra security mitigations. - *Disable*: Runs the Sandbox in the standard mode without extra security mitigations.
- *Default*: This value is the default value for Protected Client mode. Currently, this default value denotes that the sandbox doesn't run in Protected Client mode. - *Default*: This value is the default value for Protected Client mode. Currently, this default value denotes that the sandbox doesn't run in Protected Client mode.
> [!NOTE] > [!NOTE]
@ -190,7 +192,7 @@ Enables or disables sharing of the host clipboard with the sandbox.
Supported values: Supported values:
- *Enable*: Enables sharing of the host clipboard with the sandbox. - *Enable*: Enables sharing of the host clipboard with the sandbox.
- *Disable*: Disables clipboard redirection in the sandbox. If this value is set, copy/paste in and out of the sandbox will be restricted. - - *Disable*: Disables clipboard redirection in the sandbox. If this value is set, copy/paste in and out of the sandbox will be restricted.
- *Default*: This value is the default value for clipboard redirection. Currently, copy/paste between the host and sandbox are permitted under *Default*. - *Default*: This value is the default value for clipboard redirection. Currently, copy/paste between the host and sandbox are permitted under *Default*.
### Memory in MB ### Memory in MB
@ -303,3 +305,4 @@ $SwapButtons::SwapMouseButton(!([System.Windows.Forms.SystemInformation]::MouseB
</LogonCommand> </LogonCommand>
</Configuration> </Configuration>
``` ```