How To Turn On The Ultra Secure Mode Sanbox In Windows Defender.

If it is usually to protect the software or application from malware attacks, then we run it in the sandbox, then this time we can protect Windows Defender itself so as not to be compromised by the attacker at all. The trick is to run this software in the sandbox.

This news comes from Secure Microsoft blog, as follows:

Security researchers both inside and outside Microsoft previously identified the ways an attacker takes advantage of a vulnerability in the Windows Defender content parser that can enable code execution of the arbitrator. Although so far we have not seen any special attack that is intended for Windows Defender, we take this possibility seriously.

Windows Defender Antivirus running in the sandbox ensures that it will not compromise activities may take place against this software, malicious action against Windows Defender will be immediately isolated and restricted within the sandbox, protect entire system from harm

In other words, the Windows Defender antivirus is being analyzed files and content that is downloaded will run with minimal permissions so avoid danger if compromised. The virus will not be able to gain access to other systems. While Windows Defender is also free to do scanning to all hardware to prevents from virus infection.

But there is a special trick to make this software runs in the Sandbox. Here's how:

launch Command Prompt or PowerShell as an Administrator, and then run the following command

setx /M MP_FORCE_USE_SANDBOX 1

After that restart your PC/laptop. This command can only work in Windows version 10 1703 (Creators Update) to the top.

1

If you want to undo, run the same command, only, replace "1" with "0". After you perform a reboot again, then this will cancel the order.

After you enable sandboxing, you will see the process of content named MsMpEngCP .exe with fewer permissions to run antimalware MsMpEng. exe process.

With the change of the system becomes more unique, Windows Defender will be more assured when running and let's keep the PC/laptop you are better of virus and malware attacks.

Warning: because Microsoft alone is not enough to render the PeDe feature is active by default, meaning the possibility you will find bugs if activate it. Even so, tech blogs have already done HowtoGeek thoroughly testing against this feature and did not find any problems at all.

---

With this feature, a Windows appears to be 10 will be more secure from the possibility of a compromise by malicious software affected or virus specifically targeting Windows Defender.