Windows sandbox cannot create process when cwd is under %USERPROFILE%\.config\opencode (ERROR 267)

Environment

• Windows
• Codex updated to the latest available version
• OpenCode workspace: %USERPROFILE%\\.config\\opencode

Expected behavior

The Codex planner executor can start cmd.exe /c cd and PowerShell Get-Location with the exact workspace cwd.

Actual behavior

The executor fails before a child process is created:
CreateProcessWithLogonW failed: 267

No command output or child-process exit code is produced.

Reproduction

1. Open %USERPROFILE%\\.config\\opencode as the workspace.
2. Ask the Codex planner executor to run cmd /c cd.
3. Observe error 267 before command execution.

Notes

• Normal PowerShell can enter the directory successfully.
• Codex was restarted and updated.
• No ACL, sandbox, or OpenCode configuration changes were made.
• This appears limited to the Codex Windows sandbox/executor cwd binding.