elevate: use more strict check for admin group

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/main.go b/main.go
index bd86227e..e7070335 100644
--- a/main.go
+++ b/main.go
@@ -75,7 +75,7 @@ func checkForAdminGroup() {
 		fatal("Unable to open current process token: ", err)
 	}
 	defer processToken.Close()
-	if !elevate.TokenIsMemberOfBuiltInAdministrator(processToken) {
+	if !elevate.TokenIsElevatedOrElevatable(processToken) {
 		fatal("WireGuard may only be used by users who are a member of the Builtin Administrators group.")
 	}
 }