Hyper-V based application isolation APIs replaced deprecated IsolatedAppLauncher API in Windows 10/11

Title: Alternatives to the Deprecated IsolatedAppLauncher API for Application Isolation in Windows 10/11

In this article, we will discuss the alternatives to the deprecated IsolatedAppLauncher API for application isolation in Windows 10/11. We will cover key concepts, provide detailed context, and offer examples using appropriate subtitles, paragraphs, and code blocks.

Introduction

With the deprecation of the IsolatedAppLauncher API in Windows 10/11, developers are seeking alternatives to achieve application isolation. This article will focus on the Application Container (AppContainer) feature, which is believed to provide a similar level of isolation.

Application Container (AppContainer)

AppContainer is a feature in Windows that allows you to isolate applications within their own sandboxed environment. This feature provides a level of protection against potential security threats, as it limits the access of an application to system resources.

Creating an AppContainer

To create an AppContainer, you can use the FodHelper class in the Microsoft.WindowsAPICodePack.Shell namespace. Here's an example:

using Microsoft.WindowsAPICodePack.Shell;

public void CreateAppContainer()
{
    var fod = new FolderObjectDetector();
    var containerFolder = fod.GetFolder(@"C:\Containers\MyAppContainer");

    if (containerFolder == null)
    {
        containerFolder = FolderObjectDetector.CreateFolder(@"C:\Containers\MyAppContainer");
    }

    var appContainer = new AppContainer(containerFolder.Path);
}

Running an Application in an AppContainer

To run an application in an AppContainer, you can use the ProcessStartInfo class and set the WorkingDirectory and Verb properties. Here's an example:

using System.Diagnostics;

public void RunApplicationInAppContainer(string appPath)
{
    var startInfo = new ProcessStartInfo(appPath)
    {
        WorkingDirectory = appContainer.Path,
        Verb = "runas"
    };

    var process = Process.Start(startInfo);
}

Conclusion

While the IsolatedAppLauncher API is deprecated, alternatives like AppContainer can be used to achieve application isolation in Windows 10/11. By creating an AppContainer and running applications within it, you can limit their access to system resources, providing a level of security against potential threats.

References

• Windows API Code Pack
• AppContainer
• ProcessStartInfo Class