aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/adminregistry.md
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--adminregistry.md18
1 files changed, 18 insertions, 0 deletions
diff --git a/adminregistry.md b/adminregistry.md
new file mode 100644
index 00000000..c7b8e559
--- /dev/null
+++ b/adminregistry.md
@@ -0,0 +1,18 @@
+## Registry Keys for Admins
+
+These are advanced configuration knobs that admins can set to do unusual things
+that are not recommended. There is no UI to enable these, and no such thing is
+planned. Use at your own risk, and please make sure you know what you're doing.
+
+#### `HKLM\Software\WireGuard\LimitedOperatorUI`
+
+When this key is set to `DWORD(1)`, the UI will be launched on desktops of
+users belonging to the Network Configuration Operators builtin group
+(S-1-5-32-556), with the following limitations for members of that group:
+
+ - Configurations are stripped of all public, private, and pre-shared keys;
+ - No version update notifications are delivered;
+ - Adding, removing, editing, importing, or exporting configurations is forbidden; and
+ - Quitting the manager is forbidden.
+
+However, basic functionality such as starting and stopping tunnels remains intact.