windows.md Codex Docs, 2026-02-19 20:37 UTC → 2026-03-05 18:41 UTC

1# Windows1# Windows

2 2 

3Tips for running Codex on Windows3The easiest way to use Codex on Windows is to use the [Codex app](https://developers.openai.com/codex/app/windows). You can also [set up the IDE extension](https://developers.openai.com/codex/ide) or [install the CLI](https://developers.openai.com/codex/cli) and run it from PowerShell.

4 4 

5The easiest way to use Codex on Windows is to [set up the IDE extension](https://developers.openai.com/codex/ide) or [install the CLI](https://developers.openai.com/codex/cli) and run it from PowerShell.5[![](/images/codex/codex-banner-icon.webp)

6 6 

7When you run Codex natively on Windows, the agent mode uses an experimental Windows sandbox to block filesystem writes outside the working folder and prevent network access without your explicit approval. [Learn more below](#windows-experimental-sandbox).7Use the Codex app on Windows

8 8 

9Instead, you can use [Windows Subsystem for Linux](https://learn.microsoft.com/en-us/windows/wsl/install) (WSL2). WSL2 gives you a Linux shell, Unix-style semantics, and tooling that match many tasks that models see in training.9Work across projects, run parallel agent threads, and review results in one place with the native Windows app.](https://developers.openai.com/codex/app/windows)

10 

11When you run Codex natively on Windows, agent mode uses a [Windows sandbox](#windows-sandbox) to block filesystem writes outside the working folder and prevent network access without your explicit approval. [Learn more below](#windows-sandbox).

12 

13If you prefer to have Codex use [Windows Subsystem for Linux](https://learn.microsoft.com/en-us/windows/wsl/install) (WSL2), [read the instructions](#windows-subsystem-for-linux) below.

14 

15## Windows sandbox

16 

17Native Windows sandbox support includes two modes that you can configure in `config.toml`:

18 

19```

20[windows]

21sandbox = "unelevated" # or "elevated"

22```

23 

24How `elevated` mode works:

25 

26- Uses a Restricted Token approach with filesystem ACLs to limit which files the sandbox can write to.

27- Runs commands as a dedicated Windows Sandbox User.

28- Limits network access by installing Windows Firewall rules.

29 

30### Grant sandbox read access

31 

32When a command fails because the Windows sandbox can't read a directory, use:

33 

34```text

35/sandbox-add-read-dir C:\absolute\directory\path

36```

37 

38The path must be an existing absolute directory. After the command succeeds, later commands that run in the sandbox can read that directory during the current session.

10 39 

11## Windows Subsystem for Linux40## Windows Subsystem for Linux

12 41 

83 ```112 ```

84- If you need Windows access to files, they’re under `\wsl$\Ubuntu\home<user>` in Explorer.113- If you need Windows access to files, they’re under `\wsl$\Ubuntu\home<user>` in Explorer.

85 114 

86## Windows experimental sandbox115## Troubleshooting and FAQ

87 

88The Windows sandbox support is experimental. How it works:

89 

90- Launches commands inside a restricted token derived from an AppContainer profile.

91- Grants only specifically requested filesystem capabilities by attaching capability security identifiers to that profile.

92- Disables outbound network access by overriding proxy-related environment variables and inserting stub executables for common network tools.

93 

94Its primary limitation is that it can’t prevent file writes, deletions, or creations in any directory where the Everyone SID already has write permissions (for example, world-writable folders). When using the Windows sandbox, Codex scans for folders where Everyone has write access and recommends that you remove that access.

95 

96### Grant sandbox read access

97 

98When a command fails because the Windows sandbox can't read a directory, use:

99 

100```text

101/sandbox-add-read-dir C:\absolute\directory\path

102```

103 

104The path must be an existing absolute directory. After the command succeeds, later commands that run in the sandbox can read that directory during the current session.

105 

106### Troubleshooting and FAQ

107 116 

108#### Installed extension, but it’s unresponsive117#### Installed extension, but it’s unresponsive

109 118