Hi,
I have an idea but I'm not sure if this is a correct and safe solution.
When you want to install an application, you must obtain permission from
UAC. If you have permission for the first installation, you can install
everything.
Idea is here.
In the first installation, we will install wg-net-service with pipe
socket with the "system" account. This service will handle network
options (add / remove route, dns, etc.).
Wireguard uses this service via the pipe socket for communication when
the tunnel is up or down. So you don't need any permission.
Regards.
Fatih USTA
On 22.11.2020 15:55, Jason A. Donenfeld wrote:
This too is a work in progress, but should give some idea of what's coming:
https://git.zx2c4.com/wireguard-windows/about/enterprise.md
Does it seem like this set of capabilities is suitable for what you
have in mind?
