New
#10
Good news but why isn't there an obvious option to turn on this worthwhile security option. Most users will be clueless the option exists.
Is there a command to check what has been set and to turn off the Sandbox option?
Good news but why isn't there an obvious option to turn on this worthwhile security option. Most users will be clueless the option exists.
Is there a command to check what has been set and to turn off the Sandbox option?
It's there, but not really there. Under the hood, the code is available to activate, but has not been generally publicly released. It's currently an Insider thing, with tight control. MS themselves say they are testing/moving cautiously due to performance impacts. Right now, just not enough empirical data to cut it loose on the public. So, no GUI or other setting to tell you if you are or not running it.
From page one article:
"How to enable sandboxing for Windows Defender Antivirus today
We’re in the process of gradually enabling this capability for Windows insiders and continuously analyzing feedback to refine the implementation.
Users can also force the sandboxing implementation to be enabled by setting a machine-wide environment variable (setx /M MP_FORCE_USE_SANDBOX 1) and restarting the machine. This is currently supported on Windows 10, version 1703 or later."
What would be the command to disable it once you enable?
setx /M MP_FORCE_USE_SANDBOX 0 ?