Strange interaction between npcap installer and AV as Local Administrator
Just posting this for reference.
On my corporate PC we have the Sophos AV package administered by corporate IT, and we users are unable to make exceptions, suppress the AV during installs etc. Developers are granted Local Administrator rights, and are able to install applications.
In the past, I have installed and uninstalled Wireshark and npcap many times, and compile my own builds to bring our local dissectors up to date on each version change. It seems that being a Local Administrator I don't get Elevation prompts when running install packages with
requestedExecutionLevel level="requireAdministrator" uiAccess="false"
in the manifest, and the install used to run smoothly. Today, Sophos nuked the npcap installer as it tried to uninstall the previous version during the Wireshark 4.4.0 installation, but let the Wireshark installer complete. Running the npcap installer directly had the same effect. Manually uninstalling npcap through the Settings App worked, and then explicitly using "Run as Administrator" on the npcap installer let it install and it runs fine.
