Windows Sandbox is a lightweight, isolated desktop environment (essentially a temporary virtual machine) built into Windows 11 Pro and Enterprise, allowing users to safely test untrusted software, apps, or browse suspicious websites. It protects the host computer, as all files, apps, and actions are permanently deleted upon closing.