Forum Discussion
Is it mandatory to install Npcap before installing Azure ATP sensor ?
Hello, Planning to install Azure ATP sensor on few production DC's most of them are Windows 2016 standard core and hosted on Hyper-v and Vmware. Considering all other prerequisites Just wanted to...
EliOfek
Microsoft
MicrosoftIt is recommended to do so yes, or else for now it will still deploy winpcap, which is not recommended. you should be able to use the provided npcap installer in silent mode in server core without issues. same parameters as in the docs.
https://docs.microsoft.com/en-us/defender-for-identity/technical-faq#how-do-i-download-and-install-the-npcap-driver
https://docs.microsoft.com/en-us/defender-for-identity/technical-faq#how-do-i-download-and-install-the-npcap-driver
Thank you Eli,
So what will be the latest Compatible working Npcap version, is it 0.996?
And as per my understanding we need to first install Npcap, regardless the server is physical or virtual and then install ATP sensor for successful and better performance without issues in future.
So what will be the latest Compatible working Npcap version, is it 0.996?
And as per my understanding we need to first install Npcap, regardless the server is physical or virtual and then install ATP sensor for successful and better performance without issues in future.
- EliOfek1.00 oem which is bundled in the latest zip package. Don't use anything else for now.
- Hi Eli,
You mean to say its part of "Microsoft Defender for Identity sensor setup package".
If yes , then just to make sure Winpcap is not deployed during this installation, Hence I want to install Npcap before installing that MDI setup package. In order to do so, can I use below link to download and install Npcap.
https://nmap.org/npcap/dist/npcap-1.00.exe- EliOfekIf you pre install npcap, winpcap will be skipped, and no, please don't use that url.
When you download the sensor zip package from the mdi portal, you will get a subfolder in the zip that contains an OEM version of the driver, make sure to use that one as it supports silent installation which should work better for core. deploy it, then deploy the sensor, and you should be fine.