My NUC NUC8i7BEH2

Just some background, this NUC that I own, was released in Q3 of 2018 and if I recall correctly I purchased around Decemeber of that year so Q4`2018.

I remember it well since it was so new and shiny back then and I was so stoked.

So did I use it well since then?

No, I didn’t, a few tickerings here and there but over all it was more a hobby to try out new flavours of linux distros or other things I was messing around with at the time, cough cough crytocurrency mining.

Why this post then?

Well I found it again recently so formatted it and though why not setup a home server lab to experiment with, always useful.

I ran into a lot of problems with drivers, lan network and wireless adapter just not working or not able to find the right drivers, possibly if I used Windows 10/11 might have worked but I wanted a server and not just any server, the latest because you know, why not.

So I wanted Windows Server 2022 running Microsoft Defender for Identity.

What I did and what error I got

  1. Install Windows 2022
  2. Get Wireless AC-9560 working
  3. Install Microsoft Defender for Identity
  4. Errors 🤣 lol

Mmmm. “no capture network adapters”

2023-06-05 23:14:12.1870 Error ExceptionHandler 
Microsoft.Tri.Infrastructure.ExtendedException: 
no capture network adapters 
[networkAdaptersCapturabilityData=MissingNetworkAdapterIds= 
CapturableNetworkAdapters= UncapturableNetworkAdapters= FaultedNetworkAdapters=]

Strange, I know there is an adapter and its working so why can’t MDI see it.

So it must be that it can’t read it? or find it or parse it?

So did some digging and perhaps the issue was the wifi adapter had a setting to monitor the traffic so MDI could parse it, so had a look at Npcap settings.

So does Npcap have a setting to enable Wifi monitoring?

Npcap

Oo it does, support Raw 802.11 traffic (and monitor mode) for wireless adapters.

That’s it, thats what I need, so lets set that.

and?

Fail, same error message.

Ok, lets try wlanhelper and see if we need to set the adapter to monitor mode after installing Npcap with that support Raw 802.11 traffic enabled, maybe the feature isn’t enabled on the adapter.

WlanHelper Wi-Fi mode monitor

Dam, then got this error

Error: SetWlanOperationMode::SetInterface error, error code = 50 (The request is not supported)

That doesn’t look fun for me, my card doesn’t support this, really?

Lets double check.

netsh wlan show wirelesscapabilities

and?


Wireless Device Capabilities
----------------------------

Interface name: Wi-Fi

    WDI Version (Windows)                       : 0.1.1.11
    WDI Version (IHV)                           : 0.1.1.12
    WiFiCx Version (IHV)                        : WiFiCx Interface Not Supported
    Firmware Version                            : E2.A2
    Station                                     : Supported
    Soft AP                                     : Not supported
    Network monitor mode                        : Not supported

No it doesn’t, well that sucks, its not supported, so what now?

OK fix the ethernet connection, that should work, right?

Uh, what driver is that again?

Longer story shorter, it took awhile but its this driver, intels site has newer ones listed and none I tried worked so a big shout out to iorx for this one which made my life easier, thanks mate. Links below to his post.

LAN-Win10_Win11-27.4.zip

Workaround is adding it as I219-LM device then referencing the driver in this zip.

Device Manager

Does it work now? Is it running?

Yes it is, Yippee!

Azure ATP Sensor

MDI Sensor

And can I see it in the Microsoft 365 Defender Portal, woop woop!

Microsoft 365 Defender Portal

Conclusion 🐒

So I got it working, achievement unlocked.

I then turned it off immediately lol. 😆

This NUC gets hot and the fan is noisey, it sounds like a whinning straining jet engine that’s just about to take off but never quite gets there and just keeps on whinning on an infinite runway as if it was never going to take off in the first place.

Tinkering never ends.

Resources: