Issue Station
Sign In
Tools hereToolbox

codex - 💡(How to fix) Fix Windows Desktop: unelevated sandbox still repeatedly launches elevated setup helper

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

Code Example

sandbox_mode = "workspace-write"

[windows]
sandbox = "unelevated"

---

[2026-05-20 17:50:35.639 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible
[2026-05-20 17:50:56.218 codex.exe] START: C:\Program Files\PowerShell\7\pwsh.exe -NoProfile -Command [Console]::OutputEncoding=[System.Text.Encoding]::UTF8;
Get-ChildItem -Force
[2026-05-20 17:50:56.229 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible
RAW_BUFFERClick to expand / collapse

What version of the Codex App are you using (From “About Codex” dialog)?

26.513.40821

What subscription do you have?

Plus

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

Codex Desktop on Windows keeps attempting sandbox setup even with:

sandbox_mode = "workspace-write"

[windows]
sandbox = "unelevated"

Each sandboxed shell command opens a Windows credential prompt for Codex helper elevated access. I cancel it every time.

sandbox.log shows:

[2026-05-20 17:50:35.639 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible
[2026-05-20 17:50:56.218 codex.exe] START: C:\Program Files\PowerShell\7\pwsh.exe -NoProfile -Command [Console]::OutputEncoding=[System.Text.Encoding]::UTF8;
Get-ChildItem -Force
[2026-05-20 17:50:56.229 codex.exe] sandbox setup required: sandbox setup marker missing or incompatible

What steps can reproduce the bug?

  1. Install and launch Codex Desktop on Windows.

  2. Open or create C:\Users\<user>\.codex\config.toml.

  3. Configure Codex with:

    sandbox_mode = "workspace-write"

    [windows] sandbox = "unelevated"

  4. Fully restart Codex Desktop.

  5. Open any local workspace.

  6. Ask Codex to run a simple sandboxed shell command, for example Get-ChildItem -Force or Get-Location.

  7. Observe that a Windows credential/UAC prompt appears for the Codex sandbox/helper elevated setup.

  8. Cancel the credential prompt.

  9. Repeat another simple shell command.

  10. Observe that the same helper prompt appears again.

What is the expected behavior?

With windows.sandbox = "unelevated", Codex should not repeatedly prompt for elevated helper setup, or should provide a documented config option to disable that setup attempt while keeping sandbox_mode = "workspace-write".

Additional information

No response

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

codex - 💡(How to fix) Fix Windows Desktop: unelevated sandbox still repeatedly launches elevated setup helper