openai / openai/codex

Windows elevated sandbox setup fails with SetNamedSecurityInfoW error 5

Open
#39,245 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app bug sandbox windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

Problem

Windows elevated sandbox setup repeatedly fails after I approve the UAC administrator prompt.

Environment
  • Windows 11
  • ChatGPT desktop app installed and updated through Microsoft Store
  • Full access is disabled
  • Requested sandbox mode: elevated
Steps to reproduce
  1. Open the ChatGPT desktop app.
  2. Select Work mode.
  3. Click “Finish Windows setup” or “Try Windows setup again.”
  4. Approve the Windows UAC administrator prompt.
  5. Wait for the setup process to finish.
Actual result

The setup fails and the app displays:

Windows setup didn't finish

The diagnostic files report:

  • helper_unknown_error
  • read ACL run had errors
  • SetNamedSecurityInfoW failed: 5

Windows error 5 indicates that the ACL operation was denied.

Expected result

The Windows setup should complete successfully and enable the elevated sandbox while retaining ChatGPT’s approval and sandbox protections.

Troubleshooting already completed
  • Updated ChatGPT through Microsoft Store.
  • Checked for Microsoft Store updates.
  • Repaired the ChatGPT app through Windows Settings.
  • Reset the app.
  • Uninstalled and reinstalled the app.
  • Restarted Windows.
  • Repeated the setup and approved the UAC prompt.

The problem still occurs.

Feedback ID

no-active-thread-01a01576-5d58-7511-b69e-27707ef7435b

The relevant session logs were submitted through the in-app feedback mechanism.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the Windows 11 flow from “Finish Windows setup” or “Try Windows setup again,” then review the submitted session logs around read ACL run had errors and SetNamedSecurityInfoW failed: 5. Trace the elevated sandbox setup entry point and verify that setup completes with the elevated sandbox enabled while preserving the stated approval and sandbox protections.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.