Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.199 Home All releases ←olderv2.1.198 v2.1.200newer→

Claude Code v2.1.199 2 Jul 2026

Windows Sandbox: No Logout Required

The Windows sandbox now uses a dedicated srt-sandbox user account instead of a Windows security group for network isolation. This eliminates the logout-and-back-in step that was previously required after installation.

Details

WFP (Windows Filtering Platform) egress filter now keys on the sandbox user's SID rather than a group membership token
Installation still requires one UAC prompt (srt-win install or npx sandbox-runtime windows-install), but no logout is needed afterward
New --sandbox-user-sid parameter replaces --group-sid in internal ACL commands
Removed the "discriminator group" concept that caused token-refresh issues
New WFP egress verification step (srt-win wfp verify) confirms the fence is active before use

Evidence

(search for "No logout is needed: the WFP filter keys on the dedicated \srt-sandbox\ user", "--sandbox-user-sid")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.199 →