diff --git a/codex-rs/tui/src/permissions/mod.rs b/codex-rs/tui/src/permissions/mod.rs
index a7b3f8e50e..f627af5a6d 100644
--- a/codex-rs/tui/src/permissions/mod.rs
+++ b/codex-rs/tui/src/permissions/mod.rs
@@ -134,7 +134,11 @@ impl PermissionsPreset {
 
         let approval = self.approval;
         let sandbox = self.sandbox.clone();
-        let label = self.label.to_string();
+        let label = if self.id == "auto" && windows_degraded_sandbox_enabled(config) {
+            "Default (non-admin sandbox)".to_string()
+        } else {
+            self.label.to_string()
+        };
         vec![Box::new(move |tx: &AppEventSender| {
             let sandbox_clone = sandbox.clone();
             tx.send(AppEvent::CodexOp(Op::OverrideTurnContext {