Mashandisiro eWindows Sandbox kuyedza kufungidzira mawedzero kana eecutable

Kana iwe uchinetsekana nekuisa yekuwedzera, inogoneka, kana kuvhura inonyumwira inonamatira, pane yakakosha sosi yatiinayo yatisingafaniri kufuratira: Windows Sandbox, yekuyedza mawedzero kana zvirongwa zvinogoneka zvinomutsa kusahadzikaZvakafanana nekuvhura musangano wakachena uyo, kana wakavharwa, unodzimwa zvachose: zero tsvina, zero inotyisa.

Pfungwa iri nyore: edza, gadzirisa, kana kuvhurika munzvimbo iri kure Hazvibatike main installation yako. Iyo inomhanya nekukurumidza, inoshandisa Windows 'yake virtualization, uye yakagadzirirwa kuitira kuti chero mushandisi ane inoenderana vhezheni anogona kuimisa nekungodzvanya kakati.

Chii chinonzi Windows Sandbox uye inoshanda sei?

Windows Sandbox (Windows Sandbox kana WSB) ndeye yakareruka, yenguva pfupi, hardware-yakasarudzika desktop Inoshanda senge chero imwe app. Pazasi, inokwirisa Microsoft's hypervisor kuvhura yakazvimirira, compartmentalized kernel, inonyatso paradzanisa zvinoitika mukati me kernel kubva kune iyo host system.

Chikumbiro chake chakajeka: Pese paunoivhura, inotanga kubva kune ichangobva kuiswa Windows, pasina kana chisaririra chezvikamu zvakapfuura. Chero mapurogiramu kana mafaira aunoisa mukati maro anovharirwa; paunovhara hwindo, zvese zvinonyangarika, uye nguva inotevera paunoivhura, iwe unenge uine yakachena muenzaniso.

Kuenzaniswa nemakina ekare chaiwo michina, WSB inopa Inotanga mumasekonzi, kuderedza kushandiswa kwendangariro Uye hapana system mifananidzo yekutarisira. Izvo zvakare hazvidi kugadzirira chaiwo madhisiki kana matemplate: ibhokisi rejecha rinoraswa rakavakirwa muWindows Pro, Enterprise, uye Dzidzo.

• Inosanganisirwa muWindows: chikamu chehurongwa mune editions inowirirana, pasina mamwe madhaunirodha emifananidzo.
• Disposable: chero chinoitika mukati chinodzimwa pakuvhara.
• Kuchenesa pakutanga kwese: mabhoti seakachena Windows kuiswa.
• Chokwadi: Kuzviparadzanisa nevamwe kuburikidza nehardware-based virtualization uye iyo Microsoft hypervisor.
• Inoshanda: kutanga kwakasimba, Virtual GPU sarudzo uye nehungwaru ndangariro manejimendi.

Nekushandisa kwezuva nezuva, izvi zvinoreva kuti unogona bvunzo zvirongwa zvisina njodzi, shanyira mawebhusaiti anofungidzirwa, kana kuongorora zvakanamirwa pasina kukanganisa komputa yako. Kana chimwe chinhu chisina kumira zvakanaka, unogona kuvhara Sandbox uye ndizvozvo.

Chii chinonzi sandbox software?

A "sandbox" software inogadzira a virtual uye shoma nharaunda uko iwe unogona kumhanya maitiro nenzira inodzorwa. Inoisa mutsetse wekuzviparadzanisa pakati pezvaunoyedza uye yako chaiyo system, kuitira kuti chero mhedzisiro kana huipi maitiro yakaputirwa.

Iyi tekinoroji inowedzera imwe sosi yepamusoro, hongu, asi mukudzoka inovimbisa izvozvo hausvibise nzvimbo yako huru Iwe hautombo "tsvina" iyo registry kana iyo chaiyo faira system. Windows inoibatanidza muWSB kuti ipe seyakajairwa muPro uye Enterprise (zvese Windows 10 uye Windows 11).

Pamusoro pekuchengetedza, bhokisi rejecha rinobatsira zvakanyanya software yekuongorora, demos, QA uye kusimudzira. Iyo inokutendera iwe kubereka nharaunda yakachena, kudzokorora mamiriro, uye kurasa shanduko nekudzvanya kumwe chete.

Zvakakosha kujekesa nezvechimiro chayo: Haisi "yakajairika" inopfuurira VMKiyi pano ndeyekushanduka, ichikubvumidza kuti uedze zviri nyore uye wodzokera kuskweya imwe pakutanga kwega kwega.

Edition uye marezinesi anoenderana

WSB inogoneswa mukati Windows 10/11 Pro, Enterprise uye Dzidzo (ona Windows 11 shanduro), kusanganisira zvakasiyana sePro Education/SE. Mumba, nekugadzira, haapo.

Nezvekodzero dzekushandisa, Windows Pro/Pro Dzidzo/SE marezinesi uye zvirongwa zvebhizimisi Bhizinesi (E3/E5) uye inodzidzisa Dzidzo (A3/A5) sanganisira kodzero yekushandisa Windows Sandbox. Kana uchibva Kumba uye uchifarira chinhu ichi, kusvetukira kuPro Kazhinji ndiyo nzira yakananga.

Hardware zvinodiwa uye kurudziro

Kuti ishande, unoda a 64-bit CPU ine virtualization (Intel VT-x kana AMD-V), virtualization inogoneswa muBIOS/UEFI, uye inoenderana inoshanda sisitimu. For Windows 10, vhezheni 1903 kana kuti gare gare inodiwa kune Pro/Enterprise editions; ye Windows 11, vhezheni 1903 kana kuti gare gare inodiwa kune Pro kana Enterprise editions.

Zvirinani, Microsoft inotaura nezvazvo 4GB RAM, 1GB yemahara nzvimbo uye 2 cores. Zvino, kuti uve pamusoro pezvinhu, chakanakira kuve nacho 8 GB kana zvimwe zve RAM uye yemazuva ano 6-core/12-thread processor kana iwe uchizoyedza inorema software.

Ramba uchifunga kuti chero chaunomhanyisa mukati chinodyawo zviwanikwa: kana iwe ukaedza mapurogiramu anoda, chengetedza RAM uye CPU headroom kuti uchengetedze muenzi achishanda zvakanaka. MaSSD anobatsira zvakanyanya kuchengetedza zvese zvichifamba zvakanaka.

Kuisa uye kumisa Windows Sandbox

Unogona kuimisa kubva kuWindows interface pachayo kana nekubvunza kuti sei gonesa uye shandisa Sandbox. Enda ku Control Panel> Zvirongwa> Batidza kana kudzima maWindows maficha uye sarudza “Windows Sandbox” (kana kuti “Windows Sandbox” zvichienderana nemutauro wako). Bvuma uye wotangazve kana wakurudzirwa.

Kana iwe uchida iyo koni, ingovhura PowerShell semutungamiriri uye mhanya: Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online. Kana wapedza, tangazve komputa yako.

Mushure mekutangazve, vhura iyo Start menyu, nyora "Windows Sandbox" woimhanya. Zvinotora nguva yakati rebei kekutanga nekuda kwekutanga kuseta, asi kunotevera kutangwa kunomhanya kunge bara.

Paunotanga, iwe uchaona a Chenesa Windows, mune rimwe hwindo, wakagadzirira kuisa chero chaunoda. Iyo inzvimbo yakamira: chero chawakaisa paPC yako chaiyo hazvionekwi mukati, uye zvinopesana.

Iyo hwindo resolution ndeye inogadzirisa zvine simba Chero saizi yaunosarudza. Iwe haufanirwe kugadzira maakaundi kana kumisa marezinesi: chinangwa ndecheku "kuvhura, kuyedza uye kuvhara" pasina kupokana.

Default, WSB inotanga isina kukurumidza GPU uye neyakagadzika gadziriso (mune akawanda madhairekitori uchaona mareferensi ku4 GB yezvakatipoteredza). Kana uchida imwe ndangariro kana kugonesa vGPU, unogona kuzviita ne .wsb configuration mafaira, sezvatichaona gare gare.

Maitiro ekufambisa mafaera, vanoisa, uye ekuwedzera kuWindows Sandbox

Uyu ndiwo mubvunzo wemiriyoni-madhora: ini ndinoisa sei yangu yekuisa kana mafaera mubhokisi rejecha? Pane nzira dzakawanda, uye zviri nani kusarudza iyo yakachengeteka zvichienderana nezvaunoda kuedza, Semuyenzaniso edza Chrome extensions.

• Sarudzo 1: Kopa uye unama. Muzviitiko zvakawanda unogona kukopa kubva kumugadziri uye nekunamira muSandbox (yakajairika mapfupi Ctrl+C / Ctrl+V) Kana iwe uchizoedza chimwe chinhu chine njodzi, zvinokurudzirwa kubatanidza izvi neakaremara networking kana kuverenga-chete maforodha kudzikisa nzvimbo yekurwisa.
• Sarudzo 2: Dhawunirodha mukati meSandbox. Vhura Edge mubhokisi rejecha uye dhawunirodha iyo EXE/ZIP kubva pawebhusaiti yemugadziri. Nenzira iyi, iwe unodzivirira kutamisa mafaera kubva kumugadziri uye chengetedza dunhu 100% sandboxed.
• Sarudzo 3: Mamepu mafolda mukuverenga-chete mode. Unokwanisa kugadzirisa folda inotambira kuti ibude muSandbox uchishandisa .wsb faira womaka se ReadOnly, kuitira kuti hapana chinoitika mukati chinogona kudzima kana kugadzirisa mafaera ako chaiwo.
• Sarudzo 4: Network kugoverana (kana iwe uchibvumira). Kuisa mugove wekugamuchira uye kuiwana kubva kuSandbox ndeimwe nzira, kunyange nekuda kwezvikonzero zvekuchengetedza, haasiriye anodiwa kune mafaera anogona kuve nengozi.

Zvinokosha: usavimba nekukweva nekudonhedza senzira yekufambisa mafaira; uye, nekugadzira, USB flash drives haikwire zvakananga muWSB. Kana iwe uchida faira kubva ku USB drive, rikope kumuridzi kutanga uye shandisa imwe yenzira dziri pamusoro.

Advanced configuration ne .wsb mafaira

WSB inobvuma XML configuration mafaira iyo inogadzirisa maitiro enharaunda: yakagoverwa ndangariro, vGPU, network, clipboard, odhiyo / vhidhiyo, uye mepu maforodha. Iwe unongoda kugadzira faira nekuwedzera .sb, chengetedza uye uvhure, uye Windows ichaivhura neiyo gadziriso.

Memory: Kugovera pachena RAM kushandiswa MemoryInMB. Semuenzaniso, 8192 ye8 GB. Izvi zvinobatsira kana iwe uchizomhanya mamwe maapplication anodiwa muchikamu chega.

<Configuration>
  <MemoryInMB>8192</MemoryInMB>
</Configuration>

GPU: Kugonesa kukwidziridzwa kwemifananidzo, wedzera Enable. By default yakaremara kufunga pamusoro host security uye mukuderedza nzvimbo yekurwisa.

<Configuration>
  <vGPU>Enable</vGPU>
</Configuration>

Mamepu mafolda: ane MappedFolders Unogona kufumura nzira yevaenzi mukati meSandbox. Kana ukatarisa ReadOnly sechokwadi, iwe unodzivirira kudzima kana shanduko paPC yako chaiyo kunyangwe ukakanganisa mukati mebhokisi rejecha.

<Configuration>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:\Users\Public\Downloads</HostFolder>
      <SandboxFolder>C:\Users\WDAGUtilityAccount\Downloads</SandboxFolder>
      <ReadOnly>true</ReadOnly>
    </MappedFolder>
  </MappedFolders>
</Configuration>

Kubatanidza sarudzo: Unogona kusanganisa ndangariro, vGPU uye maforodha ku gadzira test profiles kuti unovhura nekudzvanya kaviri paunenge wavakuda. Kana iwe uchizomhanya zvakanyanya kukahadzika mafaera, funga dzima network mu .wsb uye shandisa kuverenga-chete maforodha.

Kukanganisa uye kufunga nezvekuchengetedza

WSB haisi bara resirivha: imwe advanced malware Inokwanisa kuona mamiriro ekunze uye "kuzvibata" kudzamara yasvika kune muenzi. Nekudaro, iyo yekuzvimiririra yehardware uye inoraswa zvisikwa zvinozviita chidimbu chinoshanda chekudzivirira kune akawanda mascenarios.

Pakuvhara Sandbox, zvose zvakarasika: Yakakwana yehutsanana hwehurongwa, asi hazvigoneke kune bvunzo dzenguva refu dzinoda kushingirira. Kana zvakadaro, iwe unenge uchiri nani kushandisa VM ine snapshots.

Pane zvimwe zvausingakwanisi kuyeuka: haikwanise kuurayiwa zviitiko zvakawanda panguva imwe chete; mukati hazvitsigirwe mamwe maapplication (Microsoft Store uye zvimwe zvinoshandiswa seCalculator kana Notepad); uye iwe haugone kurodha "imwe Windows" kunze kweiyo inotambira Windows mukati meSandbox (kanganwa, semuenzaniso, kutanga Windows 7 paWindows 11 kuburikidza neWSB).

Nezve USB, maprinta kana mamwe maperipherals, WSB haifumure midziyo yevatambi Zvakananga. Inoisa pamberi pekuzviparadzanisa nevamwe kuitira kuchengetedza, saka nzira yakajairika ndeyekukopa / kunama, kurodha mukati, kana mepu maforodha.

Mibvunzo Inowanzo bvunzwa

• Ndinogona kushandisa WSB paWindows Home? Kwete, muPro, Enterprise, uye Dzidzo chete (kusanganisira Pro Dzidzo/SE). Kana uchida, funga kusimudzira.
• Ndinogona kushandisa kudhonza nekudonha? Nzira yakavimbika ndeyekukopa/kunamira, kudhawunirodha, kana kuita mepu maforodha. DnD haisi iyo nzira inokurudzirwa.
• USB inotsigirwa mukati meWindows Sandbox? Nekugadzira, USB madhiraivha uye peripherals haana kukwidzwa zvakananga. Chengetedza zvinhu zvichifamba kuburikidza nemaforodha ane mepu kana kurodha mukati.
• Yakawanda sei ndangariro yainoshandisa nekukasira? Mazhinji madhairekitori anoreva 4 GB seyakagadzika gadziriso; kana uri mupfupi, shandisa MemoryInMB mu .wsb yako.
• Ndinogona kuimhanyisa kakawanda kamwechete? Kwete, haitsigire zviitiko zvakawanda panguva imwe chete zvakafanana.
• Inoshanda kune ese malware? Kune miyedzo yakawanda, hongu, asi kumwe kutyisidzira kwepamberi kunogona kuona bhokisi rejecha. Idziviriro huru, kwete nhoo yakakwana.

Windows Sandbox yave iyo "chengetedzo yemusango" inovhura nzira yekuyedzwa nechivimbo: inokupa Windows nyowani nguva dzese, pasina kuisa VMs, pasina kugadzirisa mifananidzo, uye nepamusoro pezvigadziro pa .wsb faira kuti uenzanise RAM, vGPU, network, uye kuverenga-chete maforodha. Kana uri kushanda nekuwedzera, zvinotemerwa, kana zvakabatanidzwa zvausina chokwadi chekuti unogona kuisa paPC yako, vhura bhokisi rejecha, edza, uye uvhare; timu yako chaiyo icharamba yakachena sezvayakanga yakaita kare.