Windows-Sandbox icon indicating copy to clipboard operation
Windows-Sandbox copied to clipboard

[Undocumented regression] Unable to map folders on network share to Guest in 24H2

Open mdnwvn opened this issue 3 months ago • 1 comments

Due to security concerns, we cannot share folders from a network share to the Virtual Environment. This would require the Sandbox VM to access network to which it is not authorize. The only option here is to save the login credentials and access the network share from within the Windows Sandbox environment.

Originally posted by @kvega005 in #63

In the public documentation it is implied that any valid host folder path is a valid mapped folder path for Sandbox, however 24H2 creates a divergence between the originally documented behavior, and the new, more restrictive behavior.

The solution should not be removing a layer of isolation and security by authenticating and mounting a network share in the guest in order to mimic the original, expected behavior. If mapping a shared host folder must be disabled by default, would adding something like a <Insecure /> configuration block where a feature flag can restore the original behavior and authorize the guest be an possibility?

mdnwvn avatar Sep 19 '25 01:09 mdnwvn

Strongly agree with this. In our lab environments we require the sandboxes to have networking disabled, but still want the user to be able to access files from their redirected documents. This was working well previously but is not not possible. Enabling networking and accessing the network share from within the sandbox is not a secure or viable alternative.

jwalter-LAT avatar Oct 03 '25 13:10 jwalter-LAT