http://blogs.technet.com/megand/archive/2004/12/02/273900.aspxMichael asked the following question about sandboxing a virtual machine. I thought it might be of general interest, so decided to post the answer, which Ben Armstrong, our resident Virtual PC guru has provided ( http://blogs.msdn.com/Virtual_PC_Guy ).en-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/megand/archive/2004/12/02/273900.aspx#273938Thu, 02 Dec 2004 20:58:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:273938CNIsn't it quite unsafe to do this in the guest os? I mean, really ugly stuff could possibly re-enable those services? <br> <br>Is there any way to disable it at the host end?http://blogs.technet.com/megand/archive/2004/12/02/273900.aspx#273977Thu, 02 Dec 2004 22:04:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:273977Virtual PC GuyHi There, <br> <br>No - there is no way to disable this on the host end today (this is something we should do). However there are a couple things to know: <br> <br>1) If you want you can remove the files that back the services <br>2) The interfaces for these features are designed such they can only be accessed from kernel mode code, which means that if you run the guest as a non-Administrative account, then there will be no way to access these <br>3) The interfaces for integration are all designed to require host side interaction. Nothing can be started solely from the virtual machine environment. <br> <br>Cheers, <br>Ben