• Introduction
• Purpose of the sandbox
• Definition of the sandbox
• App Service Plans and Sandbox Limits
• General Sandbox Restrictions
• Writing to registry
• Access to Event Log
• Access to out-of-process COM servers
• Use of Console
• Win32k.sys (User32/GDI32) Restrictions
• Microsoft SQL Reporting Framework manually generating PDFs
• PDF generation from HTML
• Process Enumeration/Job-Assignment
• Service Control Manager (SCM) Access
• File System Restrictions/Considerations
• Home directory access (d:\home)
• Local directory access (d:\local)
• System drive access
• Symbolic link creation
• Networking Restrictions/Considerations
• Network endpoint listening
• Local Address Requests
• Private Address Requests
• Use of Raw Sockets
• Restricted Outgoing Ports
• Named Pipes
• Virtual Networks
• Numerical Sandbox Limits
• Per-Sandbox (per-app/per-site) Numerical Limits
• Cross VM Numerical Limits
• .NET Threadpool and ASP.NET Settings
• Unsupported frameworks