diff --git a/codex-rs/core/src/config/config_tests.rs b/codex-rs/core/src/config/config_tests.rs
index 8dea1ae7c5..d01856fcdc 100644
--- a/codex-rs/core/src/config/config_tests.rs
+++ b/codex-rs/core/src/config/config_tests.rs
@@ -978,6 +978,10 @@ async fn network_proxy_feature_matrix_preserves_sandbox_network_semantics() -> s
                     network_access: case.network_enabled,
                     ..Default::default()
                 }),
+                windows: Some(WindowsToml {
+                    sandbox: Some(WindowsSandboxModeToml::Elevated),
+                    sandbox_private_desktop: None,
+                }),
                 features,
                 ..Default::default()
             },
@@ -1020,6 +1024,9 @@ sandbox_mode = "workspace-write"
 
 [sandbox_workspace_write]
 network_access = true
+
+[windows]
+sandbox = "elevated"
 "#,
     )?;
     let config = ConfigBuilder::without_managed_config_for_tests()