{"version":"2.1.199","anchor":"windows-sandbox-no-logout-required","canonical_anchor":"windows-sandbox-no-logout-required","heading":"Windows Sandbox: No Logout Required","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.199\/e\/windows-sandbox-no-logout-required","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.199","markdown":"### Windows Sandbox: No Logout Required\n\nThe Windows sandbox now uses a dedicated `srt-sandbox` user account instead of a Windows security group for network isolation. This eliminates the logout-and-back-in step that was previously required after installation.\n\n**Details**\n\n- WFP (Windows Filtering Platform) egress filter now keys on the sandbox user's SID rather than a group membership token\n- Installation still requires one UAC prompt (`srt-win install` or `npx sandbox-runtime windows-install`), but no logout is needed afterward\n- New `--sandbox-user-sid` parameter replaces `--group-sid` in internal ACL commands\n- Removed the \"discriminator group\" concept that caused token-refresh issues\n- New WFP egress verification step (`srt-win wfp verify`) confirms the fence is active before use\n\n**Evidence**\n\n(search for `\"No logout is needed: the WFP filter keys on the dedicated \\`srt-sandbox\\` user\"`, `\"--sandbox-user-sid\"`)"}