A recent Windows 10 Insider Feedback Hub quest revealed that Microsoft is developing a new throwaway sandboxed desktop feature called “InPrivate Desktop”. This feature will allow administrators to run untrusted executables in a secure sandbox without fear that it can make any changes to the operating system or system’s files.
“InPrivate Desktop (Preview) provides admins a way to launch a throwaway sandbox for secure, one-time execution of untrusted software,” the Feedback Hub questions explains. “This is basically an in-box, speedy VM that is recycled when you close the app!”
This quest is no longer available in the Feedback Hub, but according to it’s description, this feature is being targeted at Windows 10 Enterprise and requires at least 4 GB of RAM, 5 GB of free disk space, 2 CPU cores, and CPU virtualization enabled in the BIOS. It does not indicate if Hyper-V needs to be installed or not, but as the app requires admin privileges to install some features, it could be that Hyper-V will be enabled.
I wonder how this will integrate with SCCM.