Cmd. /setup-default-sandbox
Set up the elevated Windows agent sandbox when Codex is running in degraded restricted-token mode.
Key takeaways
/setup-default-sandboxreplaces the degraded Windows restricted-token sandbox with the elevated agent sandbox.- It appears only in the applicable degraded Windows state and opens an administrator setup flow.
- Completion selects the elevated sandbox and its corresponding automatic approval preset.
- Use
/permissionsfor ordinary policy changes and/sandbox-add-read-dirfor a narrow extra read path.
Original Command Declaration
/setup-default-sandboxOfficial Summary
/setup-default-sandbox configures the elevated Windows agent sandbox when Codex detects degraded mode.
Usage
/setup-default-sandboxGood Examples
- Run it after Codex detects the degraded Windows sandbox and offers elevated setup.
- Verify the resulting sandbox and approval state with
/statusand/permissions.
Similar Commands
| Command | Difference | Choose It When |
|---|---|---|
/setup-default-sandbox | Installs the elevated Windows sandbox | You need to replace degraded mode |
/sandbox-add-read-dir | Grants one extra absolute read path | Only a specific external directory is blocked |
/permissions | Changes approval profiles | You need a session policy change without installation |
Use Cases
- Completing sandbox onboarding on a new Windows installation.
- Removing execution limitations caused by degraded mode.
- Restoring a team-standard Windows security environment.
Cautions
- This is Windows-only and appears only in the degraded restricted-token state.
- Check organizational endpoint and security policy before the administrator flow.
- Re-check the effective mode and writable roots with
/statusafterward.
Release Basis
- Judgment: rename confirmed plus official listing
- First evidence under the current name:
rust-v0.105.0 - Date (UTC): 2026-02-25
- Release link: https://github.com/openai/codex/releases/tag/rust-v0.105.0
- Note: elevated sandbox onboarding first appeared in 0.80.0 as
/setup-elevated-sandbox.
Sources
- Codex slash commands: https://developers.openai.com/codex/cli/slash-commands
- Codex 0.105.0 slash command source: https://github.com/openai/codex/blob/rust-v0.105.0/codex-rs/tui/src/slash_command.rs