What are Limited Access Features (LAF) on Windows?

They are restricted Windows APIs that require explicit Microsoft approval and a feature ID/token. The Wireless Communication Library provides a way to unlock them without going through Microsoft's approval process.

How can I unlock a Limited Access Feature without Microsoft approval?

Use the wclLafManager class from the Wireless Communication Library. Embed a specially formatted resource in your executable, and the class handles the rest.

Do I need to know the LAF feature ID?

No, wclLafManager can enumerate available LAFs on the system, so you can verify and unlock features dynamically.

Limited Access Features

The Wireless Communication Library's wclLafManager class unlocks any Limited Access Feature (LAF) on Windows 10 and 11 without requiring Microsoft's approval. Simply embed a special resource in your executable and call the API - no feature ID or token needed.

Microsoft Windows includes a wide range of APIs and features designed to empower developers to build powerful applications. However, some functionalities are classified as Limited Access Features (LAF) — special capabilities that require explicit approval from Microsoft before they can be used in an application. While Microsoft does not publish a LAF list, some known LAFs include:

Deep system diagnostics APIs
e.g., low-level hardware access.
Advanced security bypass mechanisms
used for debugging but risky if misused.
Certain enterprise management functions
e.g., domain policy overrides.
Experimental UI/UX features
before public release.

How It Works

To use the Limited Access Feature, developers must request permission from Microsoft and obtain a feature ID and access token. Without approval, calling the restricted APIs will fail. However, the Wireless Communication Library solves this problem and provides a mechanism to unlock any LAF without need to contact the Microsoft.

LAF-protected APIs require: A Feature ID (assigned by Microsoft upon approval); A Runtime Use Token (validates permission during execution). If an app tries to call a restricted API without authorization, the call will fail.

The Wireless Communication Library provides the wclLafManager class, which enables developers to unlock any Limited Access Feature (LAF) without requiring a formal Microsoft approval request. Additionally, the wclLafManager allows applications to enumerate available LAFs on the system, ensuring that developers can verify whether a required feature is locked before attempting to unlock it.

Prerequisites

Only one prerequisite exists for using the wclLafManager class to unlock Limited Access Features (LAF). Your application must include a specially formatted resource embedded in its executable file. The required resource format is:

Identity LimitedAccessFeature { L"AppName_Publisher" }

where: AppName represents your application's name (for example: LafManager); Publisher is a randomly generated alphabetic string with a fixed length of exactly 13 characters (valid characters: A-Z, a-z). Once this resource is properly embedded in your application's executable file, wclLafManager automatically handles all remaining operations.

The example application with example resource file can be found in our GitHub repository by this link. Should you have any questions, please do not hesitate to contact us.

Frequently Asked Questions

What are Limited Access Features (LAF) on Windows?: They are restricted Windows APIs that require explicit Microsoft approval and a feature ID/token. The Wireless Communication Library provides a way to unlock them without going through Microsoft's approval process.
How can I unlock a Limited Access Feature without Microsoft approval?: Use the wclLafManager class from the Wireless Communication Library. Embed a specially formatted resource in your executable, and the class handles the rest.
Do I need to know the LAF feature ID?: No, wclLafManager can enumerate available LAFs on the system, so you can verify and unlock features dynamically.