The Wireless Communication Library's wclLafManager class unlocks any
Limited Access Feature (LAF) on Windows 10 and 11 without requiring Microsoft's approval. Simply embed a
special resource in your executable and call the API — no feature ID or token needed.
Microsoft Windows includes a wide range of APIs and features designed to empower developers to build powerful applications. However, some functionalities are classified as Limited Access Features (LAF) — special capabilities that require explicit approval from Microsoft before they can be used in an application. While Microsoft does not publish a LAF list, some known LAFs include:
- Deep system diagnostics APIs — for example, low-level hardware access.
- Advanced security bypass mechanisms — used for debugging but risky if misused.
- Certain enterprise management functions — for example, domain policy overrides.
- Experimental UI/UX features — released to developers before public release.
How it works
To use a Limited Access Feature, developers must normally request permission from Microsoft and obtain a feature ID and access token. Without approval, calling the restricted APIs will fail. However, the Wireless Communication Library solves this problem and provides a mechanism to unlock any LAF without the need to contact Microsoft.
LAF-protected APIs require a Feature ID, assigned by Microsoft upon approval, and a Runtime Use Token, which validates permission during execution. If an app tries to call a restricted API without authorization, the call will fail.
The Wireless Communication Library provides the wclLafManager class, which enables developers to
unlock any Limited Access Feature without a formal Microsoft approval request. Additionally, wclLafManager allows
applications to enumerate available LAFs on the system, so developers can verify whether a required feature is locked before
attempting to unlock it.
Prerequisites
Only one prerequisite exists for using the wclLafManager class to unlock Limited Access Features. Your application
must include a specially formatted resource embedded in its executable file. The required resource format is:
Identity LimitedAccessFeature { L"AppName_Publisher" }
where AppName represents your application's name (for example, LafManager), and Publisher
is a randomly generated alphabetic string with a fixed length of exactly 13 characters (valid characters: A-Z,
a-z). Once this resource is properly embedded in your application's executable file, wclLafManager
automatically handles all remaining operations.
The example application with the example resource file can be found in our GitHub repository by this link. Should you have any questions, please do not hesitate to contact us.
Frequently asked questions
- What are Limited Access Features (LAF) on Windows?
- They are restricted Windows APIs that require explicit Microsoft approval and a feature ID or token. The Wireless Communication Library provides a way to unlock them without going through Microsoft's approval process.
- How can I unlock a Limited Access Feature without Microsoft approval?
- Use the
wclLafManagerclass from the Wireless Communication Library. Embed a specially formatted resource in your executable, and the class handles the rest. - Do I need to know the LAF feature ID?
- No.
wclLafManagercan enumerate available LAFs on the system, so you can verify and unlock features dynamically.