# Where are the Windows configuration and log files?

Last validated Aug 6, 2025

In most cases, there is no need to open the Tailscale configuration or log files, but in the event that is required, the Windows client uses data in 3 locations:

1. User account AppData
2. System account AppData
3. Local system registry

## User Account AppData

The user account AppData directory is typically located in `C:\Users\(your username)\AppData\Local\Tailscale`. Normally, the AppData directory is hidden in Windows Explorer, so it may be difficult to find. One way is to hold the Windows logo key and press **R**. Type in `%LOCALAPPDATA%\Tailscale` and select **OK**.

![The Run window opened with the path to the Tailscale application data filled in the field.](concepts/windows-config-and-log-files/windows-config-run.png)

![A window displaying the files located in the Tailscale application data directory.](concepts/windows-config-and-log-files/windows-config-files.png)

In this directory, there are several files and one directory:

* `prefs.conf` contains the settings for this computer. Do not copy this file between computers as it contains the private keys identifying this computer to others on the Tailscale network.
* `tailscale-ipn.log.conf` contains the identifiers used by our log collection server to recognize your computer when it uploads its logs.
* `tailscale-ipn.log1.txt` and `tailscale-ipn.log2.txt` contain temporary log messages that are not yet uploaded or saved elsewhere and thus are usually empty.

## System Service ProgramData

The Tailscale service data directory is typically located in `C:\ProgramData\Tailscale`. Occasionally, the `ProgramData`
directory will be in a different location; if it is not in `C:\ProgramData`, look for the `%ProgramData%` environment
variable.

Normally, you will not have access to the `Tailscale` directory under `ProgramData` because it contains private keys. If
you need to access these files you will first have to grant yourself permission (which is only possible if you have an
administrator account). If you go to the directory in Windows Explorer, it will present a prompt that will grant
you permission. Or, if you wish to inspect the contents without granting yourself permission, you can access it using
PowerShell as an Administrator:

1. Right-click on the start menu and choose **Windows PowerShell (Admin)**.

   ![Menu listing options like 'Computer Management', 'Windows PowerShell', and 'Windows PowerShell (Admin)'.](concepts/windows-config-and-log-files/windows-config-authorize.png)

2. Select **Yes** to confirm running as administrator.

3. Type

   ```powershell
   cd $Env:ProgramData\Tailscale
   ```

4. Type `dir`

   ![A PowerShell window with the command to navigate to the Tailscale ProgramData directory. Then the command to display the contents of the directory. Several files and subdirectories are listed.](concepts/windows-config-and-log-files/windows-config-shell.png)

In this directory, there are several files and one directory:

* `server-state.conf` contains the settings for the "Unattended mode" feature and the key that identifies this computer to the login server.
* `tailscale-ipn.log.conf` contains the identifiers used by our log collection server to recognize your computer when it uploads its logs.
* `tailscale-ipn.log1.txt` and `tailscale-ipn.log2.txt` contain temporary log messages that are not yet uploaded or saved elsewhere and thus are usually empty.
* The `Logs` directory contains the logs from the Windows Service process.

## Local system registry

Registry policies to be used with Tailscale are listed in our [MDM deployment with Windows guide][docs-windows-mdm].

[docs-windows-mdm]: /docs/integrations/mdm/windows-mdm