You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.311,
ImprovementsSection of the release
What
The sandbox is the protective boundary that limits what commands Claude runs can reach. Its instructions to Claude on Windows now give more precise advice about the allowLocalBinding setting, which lets programs listen on a local network port.
When sandbox settings are locked by managed settings, Claude is told that allowLocalBinding goes in "the managed settings, which their administrator controls". Managed settings are settings an organisation applies centrally.
Otherwise, Claude is told that a project's own settings do not count for this on Windows.
Before this change, the advice named only the managed settings or a settings file.
Why
When Claude explains how to let a local server run inside the sandbox on Windows, it now points you to the right place. If your settings are locked, you know to ask your administrator instead of editing a file that will not help.
