What version of the Codex App are you using (From “About Codex” dialog)?
26.513.40821
What subscription do you have?
Plus
What platform is your computer?
Microsoft Windows NT 10.0.26200.0 x64
What issue are you seeing?
Codex Desktop on Windows keeps attempting sandbox setup even with:
sandbox_mode = "workspace-write"
[windows]
sandbox = "unelevated"
Each sandboxed shell command opens a Windows credential prompt for Codex helper elevated access. I cancel it every time.
sandbox.log shows:
[2026-05-20 17:50:35.639 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible
[2026-05-20 17:50:56.218 codex.exe] START: C:\Program Files\PowerShell\7\pwsh.exe -NoProfile -Command [Console]::OutputEncoding=[System.Text.Encoding]::UTF8;
Get-ChildItem -Force
[2026-05-20 17:50:56.229 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible
What steps can reproduce the bug?
-
Install and launch Codex Desktop on Windows.
-
Open or create C:\Users\<user>\.codex\config.toml.
-
Configure Codex with:
sandbox_mode = "workspace-write"
[windows]
sandbox = "unelevated"
-
Fully restart Codex Desktop.
-
Open any local workspace.
-
Ask Codex to run a simple sandboxed shell command, for example Get-ChildItem -Force or Get-Location.
-
Observe that a Windows credential/UAC prompt appears for the Codex sandbox/helper elevated setup.
-
Cancel the credential prompt.
-
Repeat another simple shell command.
-
Observe that the same helper prompt appears again.
What is the expected behavior?
With windows.sandbox = "unelevated", Codex should not repeatedly prompt for elevated helper setup, or should provide a documented config option to disable that setup attempt while keeping sandbox_mode = "workspace-write".
Additional information
No response
What version of the Codex App are you using (From “About Codex” dialog)?
26.513.40821
What subscription do you have?
Plus
What platform is your computer?
Microsoft Windows NT 10.0.26200.0 x64
What issue are you seeing?
Codex Desktop on Windows keeps attempting sandbox setup even with:
Each sandboxed shell command opens a Windows credential prompt for Codex helper elevated access. I cancel it every time.
sandbox.log shows:
What steps can reproduce the bug?
Install and launch Codex Desktop on Windows.
Open or create
C:\Users\<user>\.codex\config.toml.Configure Codex with:
sandbox_mode = "workspace-write"
[windows]
sandbox = "unelevated"
Fully restart Codex Desktop.
Open any local workspace.
Ask Codex to run a simple sandboxed shell command, for example
Get-ChildItem -ForceorGet-Location.Observe that a Windows credential/UAC prompt appears for the Codex sandbox/helper elevated setup.
Cancel the credential prompt.
Repeat another simple shell command.
Observe that the same helper prompt appears again.
What is the expected behavior?
With windows.sandbox = "unelevated", Codex should not repeatedly prompt for elevated helper setup, or should provide a documented config option to disable that setup attempt while keeping sandbox_mode = "workspace-write".
Additional information
No response