Simple windows sandbox based on restricted tokens, integrity levels, desktop isolation and job limitation.