The Drawbridge[1] stuff is pretty interesting looking. I really wish MS would ship a simple sandboxing solution, so I can run arbitrary binaries and restrict them. The new Metro app stuff is cute, but doesn't help with the millions of existing binaries. Nor does it seem very user-friendly or useful, for that matter.<p>1: <a href="http://research.microsoft.com/en-us/projects/drawbridge/" rel="nofollow">http://research.microsoft.com/en-us/projects/drawbridge/</a>