There is sandboxing API in Windows. It's called running programs in userspace.