mitgliedschaft in der network configuration operators gruppe alleine reicht anscheinend nicht...
https://git.zx2c4.com/wireguard-windows/about/docs/adminregistry.md
HKLM\Software\WireGuard\LimitedOperatorUI
When this key is set to DWORD(1), the UI will be launched on desktops of users belonging to the Network Configuration Operators builtin group (S-1-5-32-556), with the following limitations for members of that group:
Configurations are stripped of all public, private, and pre-shared keys;
No version update notifications are delivered;
Adding, removing, editing, importing, or exporting configurations is forbidden; and
Quitting the manager is forbidden.
However, basic functionality such as starting and stopping tunnels remains intact.