Failed to create the npcap service - Unknown Error! 800f0203

[TofuCrew]

Installing: npcap-0.9995 Error: Unknown Error! 800f0203 Npcap LWF driver has failed to be installed Failed to create the npcap service for Win7, Win8 and Win10

Windows: 10.0.14393 (Windows 10 LTSB 1607) This is a fresh boot on a sysprepped image

Things I've tried:

1. Disable driver enforcement via group policy a. GPEdit.msc - User Configuration-> Administrative Templates-> System-> Driver Installation-> disable all "prevent installation" items individually and together b. enabled/ignore c. enabled/warn d. Enable "Allow Administrators to override device installation restriction policies"
2. Disable Driver Signature Enforcement a. Click Start -> Hold [shift] + Click Power->Restart Troubleshoot -> Advanced Options -> Startup Settings Disable Driver Signature Enforcement
3. 1 and 2 at same time
4. run: bcdedit.exe /set nointegritychecks on
5. Uninstall National Instruments GigE Vision Drivers
6. Uninstall all NI software/components
7. Windows updates
8. Safe Boot
9. CCleaner fix registry
10. Farbar Recovery Scan Tool
11. Grant write access to "everyone" in a. system32 b. ./AppData/Local/Temp
12. Other acts of desperation

First of all, thank you to all the wonderful devs and contributors on this project and thank you for taking the time to read my issue report. I'm trying to install Wireshark on an Optiplex XE3 running Windows 10 LTSB 1607. This is a fresh install of a sysprepped image. I was able to recreate the issue with several versions of the standalone npcap installer. I migrated the image to a VM and am receiving the same error message. I revert back to the base snapshot after each test while also trying some tests simultaneously I've been going at this issue for a couple days now. I tried due diligence and looked through open/closed issues and tried pretty much everything on every page I can find. Any insight would be appreciated!

install.log NPFInstall.log setupapi.dev.log

[dmiller-nmap]

Thanks for this report. 0x800f0203 is SPAPI_E_NO_DRIVER_SELECTED.

Please avoid attempting to bypass ordinary system protections in order to install Npcap. These are unnecessary, dangerous, and may result in an unstable system that we cannot diagnose because the error messages are different than a standard system. Instead, restore to a known-good system, reboot, and try again with Npcap 0.9997. If this fails, please provide the same log files and we will see if we can get any new information.

[TofuCrew]

I found a "workaround" that allows me to install npcap and capture packets by manually installing the drivers first, then installing npcap.

1. Using 7-zip, unpack the installer
2. From elevated cmd, run NPFInstall.exe -i ( Install the LWF driver )
3. Install wireshark w/npcap
4. From elevated cmd, run NPFInsall.exe -ii ( install the legacy driver (for XP) )

I'm unsure why the legacy driver ( -ii ) had to be installed afterwards. Npcap would install completely but wireshark wouldn't have any interfaces until running " NPFInsall.exe -ii "

Please avoid attempting to bypass ordinary system protections in order to install Npcap.

I just want to add that I 100% agree with this-- all the mentioned tests were in a VM sandbox environment, throwing spaghetti at the wall.

[carlox27]

Hi can you explain me how to install npcap, please. I have the same problem, I can't use well wireshark because of that

[ttimasdf]

Same problem for me. related log in C:\Windows\INF\setupapi.dev.log

>>>  [Install network driver - INSECURE_NPCAP]
>>>  Section start 2021/01/05 16:20:59.384
      cmd: "C:\Users\win\Downloads\npcap-1.10\NPFInstall.exe" -i
     dvi: Installing new driver
     dvi: {Create Device} 16:20:59.402
     dvi:      {Create Device - INSECURE_NPCAP}
     dvi:           Class GUID  - {4d36e974-e325-11ce-bfc1-08002be10318}
     dvi:           Description - <none>
     dvi:           Flags       - 0x00000001
     dvi:           Created device 'ROOT\INSECURE_NPCAP\0000'
     dvi:      {Create Device - exit(0x00000000)}
     dvi: {Create Device - exit(0x00000000)} 16:20:59.453
     dvi: {Build Driver List} 16:20:59.461
     dvi:      Searching for hardware ID(s):
     dvi:           insecure_npcap
     dvi: {Build Driver List - exit(0x00000000)} 16:20:59.485
     dvi: {Select Best Driver}
!    dvi:      Selecting driver failed(0xe0000228)
     dvi: {Select Best Driver - exit(0xe0000228)}
<<<  Section end 2021/01/05 16:20:59.522
<<<  [Exit status: FAILURE(0x800f0203)]

[ttimasdf]

The installation error above occurs in ALL of my Windows PCs ... Is this a common problem?

[ttimasdf]

For other pool people who have the same problem as us, use the windows feature "Reset this PC" (which retains user data) along with Chocolatey may ease the pain of setting up everything from ground up.

I've tried everything from google and none of that works, finally I have to wipe all of my servers and laptops just to get npcap working. I tried to modify secure boot settings, allow test signing from bootloader, some "hacks" of enabling cross-signed drivers, disable/reinstall all of the network/vpn adapter, clean up driver store and registry, remove ghost devices, disable/uninstall anti-virus and firewalls, read MSDN docs trying to install npcap drivers manually (oh, there are three methods!).

None of that works. And that's just part of what I could recall. I think I'm just about to dive into Windows internals, too costly for a regular user like me. I hate windows.

[changov]

I was getting such error persistently as well with npcap 1.1 on Windows 8.1. Switching install options didn't help. Since I'm running OpenVPN on this PC, I had a hunch its "TAP-Windows" adapter might be getting in the way. Stopping the service didn't help. But disabling it and reboot did the trick: NPcap installed successfully. Then I re-enabled OpenVPN, and both have been coexisting fine. (I did some packet capturing with Wireshark.)

[dmiller-nmap]

Closing this due to inactivity and some dangerous advice on workarounds. If this issue still affects you with Npcap 1.70 or later, please provide feedback at #611 so we can look for a resolution.