Sandboxie?

That's actually the new security model that Metro apps use. They are sandboxed by default with a declarative privileges model. I think its called AppContainer?

Here's a blog post: http://recxltd.blogspot.com/2012/03/windows-8-app-container-...