codex - 💡(How to fix) Fix Multiple start-as user support for windows [1 participants]

TL;DR

Run Codex as a specific Windows user with restricted permissions to prevent unintended changes to the machine.

Guidance

• Investigate using Windows built-in features such as RunAs to launch Codex and associated applications (e.g., VSCode) with a specific user account.
• Consider modifying the Codex app to accept a configurable user parameter for launching external applications, allowing for more fine-grained control over user permissions.
• Explore Active Directory (AD) permission settings to restrict the actions that Codex can perform on the machine, even when running within the app.
• Evaluate the feasibility of sandboxing the Codex environment to prevent any potential security risks.

Example

No code snippet is provided as the issue does not contain sufficient technical details to generate a specific example.

Notes

The solution may require coordination with system administrators to configure AD permissions and Windows user settings. Additionally, the feasibility of implementing these changes may depend on the specific Codex variant and version being used.

Recommendation

Apply a workaround by using Windows built-in features (e.g., RunAs) to launch Codex and associated applications with a specific user account, as this approach can provide an immediate solution to the problem while a more permanent fix is being developed.