Downloading and running an unknown .exe file can be fraught with terror -- or at the very least, a whole lot of a faff as you're required to set up a clean installation of Windows on a virtual machine. Now, Microsoft is introducing a new solution that brings it in line with a standard already found on other operating systems: Windows Sandbox. The feature creates "an isolated, temporary desktop environment" (and lightweight, at 100MB) on which to run an app, and once you've finished with it, the entire sandbox is deleted -- everything else on your PC is safe and separate. The feature is available for users of Windows 10 Pro or Enterprise running Build 18301 or later, and requires AMD64 and virtualization capabilities enabled in BIOS.