diff --git a/ESA-TailScale.ps1 b/ESA-TailScale.ps1
index c8ca5ee..4100c1b 100644
--- a/ESA-TailScale.ps1
+++ b/ESA-TailScale.ps1
@@ -51,6 +51,17 @@ foreach ($folder in @($localApp, $roamingApp)) {
     }
 }
 
+# Set Headscale registry configuration
+$registryPath = 'HKLM:\Software\Tailscale IPN'
+New-Item -Path $registryPath -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name UnattendedMode -PropertyType String -Value "user-decides" -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name AllowIncomingConnections -PropertyType String -Value "never" -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name AdminConsole -PropertyType String -Value "hide" -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name NetworkDevices -PropertyType String -Value "hide" -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name TestMenu -PropertyType String -Value "hide" -Force | Out-Null
+New-ItemProperty -Path $registryPath -Name LoginURL -PropertyType String -Value "http://headscale.estudiogroup.com:8080" -Force | Out-Null
+Write-Host "Registry keys created successfully."
+
 # Restart service if exists
 if ($service) {
     Start-Service Tailscale