IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Windows 10 security focused Sandbox broken and left without a fix for a month

It's just one of the errors that have plagued the latest Windows update

Microsoft's flagship OS Windows 10 on a purple graphic

One of the most anticipated features of the Windows 10 May update for security conscious Windows users is broken.

Windows Sandbox is a feature that should allow users to open a suspicious website in a virtual machine-like environment to test whether a visit would result in malicious code being executed on their computer.

It's a security feature many were excited about, but the feature now launches with an error code "0x80070002" for some users. Microsoft said, "we are working on a resolution and estimate a solution will be available in late June".

Windows Sandbox is a feature only available to Windows Pro and Windows Enterprise customers, two iterations of the operating system specifically targeted at businesses.

Windows Sandbox exists as a browser extension that works based on an organisation's group policy. This means that the network administrator can apply settings for devices across the company so Sandbox would work in the same way for the IT department as it would for the CEO.

The extension cross-references a website with those known to be a security risk and then puts the website in the Windows Sandbox mode if the user clicks on the web page.

The feature would be useful for businesses that could come to a halt if a malicious program wormed its way into the network due to one employee visiting a nasty site. The Sandbox mode is wiped after every session so businesses can remain assured that if a malicious program was detected, it wouldn't leave the Sandbox and get into the network.

"When the sandbox is closed it effectively wiped and restored to its original state," said Sean Wright, security researcher, and Open Web Application Security Project (OWASP) Scotland chapter leader.

"This is extremely useful when performing research on potentially malicious software. It provides a clean state every time the sandbox is opened from new."

Microsoft announced that it was working on a similar feature to its Sandbox mode back in December. It was to take the form of a desktop virtual machine-like app that would allow users to not just run webpages in a Sandbox mode, but any software without the risk of causing any lasting harm from malicious code.

The mode is currently in a testing phase but there are plans to roll it out to enterprise customers too.

The faulty Sandbox mode isn't the only issue Microsoft is having with its May update (V1903) - machines running certain AMD RAID drivers weren't able to update due to the drivers being incompatible with the update.

"On computers that have AMD Ryzen or AMD Ryzen Threadripper processors, certain versions of AMD RAID drivers are not compatible with the Windows 10 May 2019 update," said Microsoft.

"If a computer has these drivers installed and configured in RAID mode, it cannot install the May 2019 update of Windows 10. If you start the installation process, the process stops."

The issue persists for both updates and fresh installs but is easily resolved. To get the update to work, the affected users must download and install the latest version of the AMD RAID drivers and restart their machine before re-initialising the update or install.

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Recommended

Hackers could use new Wslink malware in highly targeted cyber attacks
malware

Hackers could use new Wslink malware in highly targeted cyber attacks

1 Nov 2021
FBI raids Chinese POS business following cyber attack claims
malware

FBI raids Chinese POS business following cyber attack claims

27 Oct 2021
Malware developers create malformed code signatures to avoid detection
malware

Malware developers create malformed code signatures to avoid detection

24 Sep 2021
New malware uses search engine ads to target pirate gamers
malware

New malware uses search engine ads to target pirate gamers

21 Jul 2021

Most Popular

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack
hacking

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

16 May 2022
Windows Server admins say latest Patch Tuesday broke authentication policies
Server & storage

Windows Server admins say latest Patch Tuesday broke authentication policies

12 May 2022
IT admin deletes company’s databases and is jailed for seven years
Policy & legislation

IT admin deletes company’s databases and is jailed for seven years

16 May 2022