diff --git a/client/windows/installer/pangolin.iss b/client/windows/installer/pangolin.iss
index cb2ce07..ecfa1d2 100644
--- a/client/windows/installer/pangolin.iss
+++ b/client/windows/installer/pangolin.iss
@@ -42,7 +42,10 @@ Name: "{autodesktop}\{#MyAppName}"; Filename: "{app}\{#MyAppExeName}"; Tasks: de
 Name: "desktopicon"; Description: "{cm:CreateDesktopIcon}"; GroupDescription: "{cm:AdditionalIcons}"
 
 [Run]
-Filename: "{app}\{#MyAppExeName}"; Description: "{cm:LaunchProgram,{#MyAppName}}"; Flags: nowait postinstall skipifsilent
+; runascurrentuser:安装包是 admin 提权运行的,默认 postinstall 会降回普通用户身份拉起
+; app(Inno 的 RunAsOriginalUser)→ requireAdministrator 的 app 起不来/没管理员权,TUN 建不了。
+; 加此标志用安装包自身的管理员令牌拉起,装完即以管理员运行、不额外弹 UAC。
+Filename: "{app}\{#MyAppExeName}"; Description: "{cm:LaunchProgram,{#MyAppName}}"; Flags: nowait postinstall skipifsilent runascurrentuser
 
 [UninstallDelete]
 ; 卸载清理运行期数据(kernel 配置等)