mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-25 03:37:23 +00:00
Small edits and removals
Biggest change is to remove the comment from the bottom. I was able to see this when I viewed the source for the page, so I didn't want to risk including it.
This commit is contained in:
parent
7bc1284757
commit
3970b76b3c
@ -37,7 +37,7 @@ Windows Sandbox configuration files are formatted as XML and are associated with
|
|||||||
|
|
||||||
**vGPU**: Enables or disables GPU sharing.
|
**vGPU**: Enables or disables GPU sharing.
|
||||||
|
|
||||||
`<VGpu>value</VGpu>`
|
`<vGPU>value</vGPU>`
|
||||||
|
|
||||||
Supported values:
|
Supported values:
|
||||||
- *Enable*: Enables vGPU support in the sandbox.
|
- *Enable*: Enables vGPU support in the sandbox.
|
||||||
@ -58,19 +58,19 @@ Supported values:
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> Enabling networking can expose untrusted applications to the internal network.
|
> Enabling networking can expose untrusted applications to the internal network.
|
||||||
|
|
||||||
**Mapped folders**: An array of folders, each representing a location on the host machine that will be shared into the sandbox at the specified path. If no path is specified, the folder will be mapped to the container user's desktop.
|
**Mapped folders**: An array of folders, each representing a location on the host machine that will be shared into the sandbox at the specified path. At this time, relative paths are not supported. If no path is specified, the folder will be mapped to the container user's desktop.
|
||||||
|
|
||||||
```
|
```
|
||||||
`<MappedFolders>`
|
<MappedFolders>
|
||||||
list of MappedFolder objects <MappedFolder>
|
<MappedFolder>
|
||||||
<HostFolder>path to the host folder</HostFolder>
|
<HostFolder>absolute path to the host folder</HostFolder>
|
||||||
<SandboxFolder>path to the sandbox folder</SandboxFolder>
|
<SandboxFolder>absolute path to the sandbox folder</SandboxFolder>
|
||||||
<ReadOnly>value</ReadOnly>
|
<ReadOnly>value</ReadOnly>
|
||||||
</MappedFolder>
|
</MappedFolder>
|
||||||
<MappedFolder>
|
<MappedFolder>
|
||||||
...
|
...
|
||||||
</MappedFolder>
|
</MappedFolder>
|
||||||
`</MappedFolders>`
|
</MappedFolders>
|
||||||
```
|
```
|
||||||
|
|
||||||
*HostFolder*: Specifies the folder on the host machine to share into the sandbox. Note that the folder must already exist on the host, or the container will fail to start.
|
*HostFolder*: Specifies the folder on the host machine to share into the sandbox. Note that the folder must already exist on the host, or the container will fail to start.
|
||||||
@ -87,7 +87,7 @@ Supported values:
|
|||||||
|
|
||||||
```
|
```
|
||||||
<LogonCommand>
|
<LogonCommand>
|
||||||
<Command>command to be invoked</Command>
|
<Command>command to be invoked</Command>
|
||||||
</LogonCommand>
|
</LogonCommand>
|
||||||
```
|
```
|
||||||
|
|
||||||
@ -101,7 +101,7 @@ Supported values:
|
|||||||
`<AudioInput>value</AudioInput>`
|
`<AudioInput>value</AudioInput>`
|
||||||
|
|
||||||
Supported values:
|
Supported values:
|
||||||
- *Enable*: Enables audio input in the sandbox. If this value is set, the sandbox will be able to receive audio input from the user. Applications that use a microphone may need this setting.
|
- *Enable*: Enables audio input in the sandbox. If this value is set, the sandbox will be able to receive audio input from the user. Applications that use a microphone may require this capability.
|
||||||
- *Disable*: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone may not function properly with this setting.
|
- *Disable*: Disables audio input in the sandbox. If this value is set, the sandbox can't receive audio input from the user. Applications that use a microphone may not function properly with this setting.
|
||||||
- *Default*: This is the default value for audio input support. Currently this means audio input is enabled.
|
- *Default*: This is the default value for audio input support. Currently this means audio input is enabled.
|
||||||
|
|
||||||
@ -120,7 +120,7 @@ Supported values:
|
|||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
> There may be security implications of exposing host video input to the container.
|
> There may be security implications of exposing host video input to the container.
|
||||||
|
|
||||||
**Protected client**: Implements increased-security settings on the sandbox RDP session. These settings decrease the attack surface of the sandbox.
|
**Protected client**: Applies additional security settings to the sandbox Remote Desktop client, decreasing its attack surface.
|
||||||
|
|
||||||
`<ProtectedClient>value</ProtectedClient>`
|
`<ProtectedClient>value</ProtectedClient>`
|
||||||
|
|
||||||
@ -156,24 +156,24 @@ Supported values:
|
|||||||
If the memory value specified is insufficient to boot a sandbox, it will be automatically increased to the required minimum amount.
|
If the memory value specified is insufficient to boot a sandbox, it will be automatically increased to the required minimum amount.
|
||||||
|
|
||||||
***Example 1***
|
***Example 1***
|
||||||
The following config file can be used to easily test downloaded files inside the sandbox. To achieve this, the script disables networking and vGPU and restricts the shared downloads folder to read-only access in the container. For convenience, the logon command opens the downloads folder inside the container when it's started.
|
The following config file can be used to easily test downloaded files inside the sandbox. To achieve this, networking and vGPU are disabled, and the sandbox is allowed read-only access to the shared downloads folder. For convenience, the logon command opens the downloads folder inside the sandbox when it's started.
|
||||||
|
|
||||||
*Downloads.wsb*
|
*Downloads.wsb*
|
||||||
|
|
||||||
```
|
```
|
||||||
<Configuration>
|
<Configuration>
|
||||||
<VGpu>Disable</VGpu>
|
<VGpu>Disable</VGpu>
|
||||||
<Networking>Disable</Networking>
|
<Networking>Disable</Networking>
|
||||||
<MappedFolders>
|
<MappedFolders>
|
||||||
<MappedFolder>
|
<MappedFolder>
|
||||||
<HostFolder>C:\Users\Public\Downloads</HostFolder>
|
<HostFolder>C:\Users\Public\Downloads</HostFolder>
|
||||||
<SandboxFolder>C:\Users\WDAGUtilityAccount\Downloads</SandboxFolder>
|
<SandboxFolder>C:\Users\WDAGUtilityAccount\Downloads</SandboxFolder>
|
||||||
<ReadOnly>true</ReadOnly>
|
<ReadOnly>true</ReadOnly>
|
||||||
</MappedFolder>
|
</MappedFolder>
|
||||||
</MappedFolders>
|
</MappedFolders>
|
||||||
<LogonCommand>
|
<LogonCommand>
|
||||||
<Command>explorer.exe C:\users\WDAGUtilityAccount\Downloads</Command>
|
<Command>explorer.exe C:\users\WDAGUtilityAccount\Downloads</Command>
|
||||||
</LogonCommand>
|
</LogonCommand>
|
||||||
</Configuration>
|
</Configuration>
|
||||||
```
|
```
|
||||||
***Example 2***
|
***Example 2***
|
||||||
@ -198,7 +198,7 @@ C:\users\WDAGUtilityAccount\Desktop\vscode.exe /verysilent /suppressmsgboxes
|
|||||||
|
|
||||||
```
|
```
|
||||||
<Configuration>
|
<Configuration>
|
||||||
<MappedFolders>
|
<MappedFolders>
|
||||||
<MappedFolder>
|
<MappedFolder>
|
||||||
<HostFolder>C:\SandboxScripts</HostFolder>
|
<HostFolder>C:\SandboxScripts</HostFolder>
|
||||||
<ReadOnly>true</ReadOnly>
|
<ReadOnly>true</ReadOnly>
|
||||||
@ -207,22 +207,9 @@ C:\users\WDAGUtilityAccount\Desktop\vscode.exe /verysilent /suppressmsgboxes
|
|||||||
<HostFolder>C:\CodingProjects</HostFolder>
|
<HostFolder>C:\CodingProjects</HostFolder>
|
||||||
<ReadOnly>false</ReadOnly>
|
<ReadOnly>false</ReadOnly>
|
||||||
</MappedFolder>
|
</MappedFolder>
|
||||||
</MappedFolders>
|
</MappedFolders>
|
||||||
<LogonCommand>
|
<LogonCommand>
|
||||||
<Command>C:\users\wdagutilityaccount\desktop\SandboxScripts\VSCodeInstall.cmd</Command>
|
<Command>C:\Users\WDAGUtilityAccount\Desktop\SandboxScripts\VSCodeInstall.cmd</Command>
|
||||||
</LogonCommand>
|
</LogonCommand>
|
||||||
</Configuration>
|
</Configuration>
|
||||||
```
|
```
|
||||||
|
|
||||||
<!--
|
|
||||||
|
|
||||||
FAQ (future)
|
|
||||||
|
|
||||||
Release Notes (future)
|
|
||||||
|
|
||||||
EnableVendorExtensions – Paul added new option for Windows Sandbox to enable/disable vGPU vendor extensions. This is as new as 12/2
|
|
||||||
RailMode – allows a user to run programs in Rail mode rather than full desktop. Internal only at this time.
|
|
||||||
|
|
||||||
Known issues (future)
|
|
||||||
|
|
||||||
-->
|
|
Loading…
x
Reference in New Issue
Block a user