Microsoft puts desktop apps in containers with Windows Sandbox

A new feature for Windows 10 Pro and Enterprise lets you run untrusted desktop apps in isolated environments more flexible than VMs