Heidelberg AICurriculum

Switching back to Windows?!?

NetworkChuck ·2026-06-01 ·2 min read

Summary written by us from the video's transcript. The video, and everything in it, is NetworkChuck's work.

Learn how OpenAI’s Windows‑native Codex app works, its sandbox security model, and seven practical Windows tips demonstrated with the tool.

Takeaways

  • Codex runs natively on Windows using a custom Rust sandbox that isolates the AI via restricted tokens and ACLs.
  • Native execution lets Codex issue PowerShell commands directly, benefiting sysadmins and developers.
  • You can control the agent’s network and file permissions through Windows firewall rules and sandbox settings (auto‑review, manual, full).
  • Windows offers hidden features like Hyper‑V root partitioning, clipboard history (Win + V), “God Mode” shortcuts, and winget package management.
  • Codex automations can clean folders, organize the desktop, and provision VMs, all while respecting the sandbox’s security boundaries.

Why a Windows‑Native AI Matters

The creator explains that most AI tools favor macOS or Linux, leaving Windows users feeling like second‑class citizens. OpenAI’s decision to make Codex run natively on Windows addresses this gap, offering tighter integration with PowerShell and system admin tasks.

Installing and Launching Codex

Codex is available from the Windows Store; after installing, it prompts for elevated permissions via UAC to set up its sandbox. The initial setup creates a restricted user account that isolates the AI agent from the main OS.

The Windows Sandbox Architecture

OpenAI built a custom sandbox using over 15,000 lines of Rust, leveraging Windows ACLs, firewall rules, and restricted tokens—not the traditional AppContainer or VM approach. Two sandbox users are created: one with network access and one without, each confined to specific folders.

PowerShell Integration

Because Codex runs directly on Windows, it can execute PowerShell commands natively. In a demo, asking the agent “how many files are in this folder?” returns results via PowerShell, showing seamless OS‑level interaction.

Managing Permissions and Auto Review

The sandbox’s firewall rules block outbound traffic until the user approves. Settings let you choose between auto‑review (AI decides simple actions), manual approval, or full access—cautioning against the latter for security.

Practical Windows Tricks Demonstrated

1. **Backwards compatibility** – older apps like SimCity still run on modern Windows. 2. **Hyper‑V** – enabling it turns your Windows installation into a privileged VM, similar to Azure’s hypervisor. 3. **Clipboard history** – press Win + V after activation to view and pin recent clips. 4. “God Mode” folder – naming a folder with a special string reveals 250 system shortcuts. 5. Built‑in package manager **winget** works like brew or apt.

Using Codex for Automation

The app can schedule chats, run agents to clean downloads, organize the desktop, and even spin up Hyper‑V VMs with Kali Linux and Ubuntu for a hacking lab. Permissions are enforced per task, demonstrating how the sandbox protects the system while still allowing powerful automation.