What are WAN Miniport, Microsoft Kernel Debug Network Adapter, and why?

Hi ,

I understand, unfortunately I don't have any more answers about the possibility of removing these devices directly if they are appearing as hidden in the device manager and because they are deactivated or disconnected.

I tried to provide as much information as possible about the adapters in question, but there is no direct response from Microsoft, other than the links I provided at the moment, you can try to contact a Microsoft agent and see if they can provide more information.

Hope this helps.

If you find the answer helpful, please mark it as an answer.

Independent Advisor - Community

Thanks

Hi ,

I am Ivan, I will help you with this.

The Microsoft Kernel Debug Network Adapter is a Windows debugging feature that allows developers to connect to a remote computer and debug the operating system kernel.

Generally used for developers for some applications.

Referrence.: https://learn.microsoft.com/en-us/windows-

hardware/drivers/debuggercmds/-ndiskd-netreport

https://wingeek.org/what-to-do-if-microsoft-ker...

This is normal and you don't need to worry about it, WAN Miniport (SSTP) is a software adapter used by the operating system to use the SSTP security protocol to make the VPN connection.

Credits.: https://answers.microsoft.com/pt-br/windows/for...

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Hope this helps.

If you find the answer helpful, please mark it as an answer.

Independent Advisor - Community

Thanks

Hi ,

Why would MS want an input vector in the kernel of everyone's machine? Or does MS use it for forced update and "telemetry" monitoring purposes?

A: I don't have an answer about this directly. There is no information from Microsoft, but I know that this adapter is used in remote access applications to restore the access connection after rebooting the computer, for example in MSRA (Remote Assistance) for Microsoft support agents to stay connected to the access while helping the user and another would be for diagnostics.

https://learn.microsoft.com/en-us/windows-hardw...

So, after I disabled it, it is still listed. It is disabled, but why didn't it disappear? Is it waiting for instructions from the Mothership to reactivate it?

A: Well, I don't know if it is possible to remove it in this question. I didn't find any information about removing the function, but when you disable it, it remains as disconnected. I don't think it is possible. It activates itself when you disable it.

Regarding the WAN miniport adapter, these are old protocols that it supports. I haven't seen them in use since the mid-2000s, and only in a corporate environment. Again, why is it still here in a newer Win10Pro setup?

A: Well, this protocol has only been visible since it was configured for native use for a long time, even though it is old, and there are VPNs that use this type of protocol and are still used today. It remains in Windows in case users need to make VPN connections, whether to create private connections or for work, among others, even today, there are applications that already come with their own protocols, for example OpenVPN, which Windows has natively. If you want to connect to a VPN that has the SSTP security protocol, this also includes the functions of the other protocols. WAN Miniport (PPTP) adapter (driver) is used when making a VPN connection to a PPTP VPN server. The WAN Miniport (PPOE) adapter (driver) would be used when your computer is connected directly to a PPOE broadband modem. Removing these adapters (drivers) would break the functionality

You can monitor the adapters if they are using a connection. For example, when you create a VPN connection, it will create a network adapter with the VPN protocol configured and it will start being monitored by Wireshack.

For you to see, I use SSTP and PPOE protocols.

Hope this helps.

If you find the answer helpful, please mark it as an answer.

Independent Advisor - Community

Thanks

Hi Ivan,

Thanks. If the Kernel Debug adapter is for debugging by developers, why would every average home user have it? I mean, given the CrowdStrike fiasco, why would MS want an entry vector into everyone's machine's kernel? Or does MS use it for their forced update and "telemetry" monitoring purposes?

So after I disabled it, it's still listed. It's disabled, but why is it not gone? Is it awaiting instructions from the MotherShip to re-enable?

With regard to the WAN Miniport Adapter, those are ancient protocols it's supporting. I haven't seen those in use since the mid-2000s, and only in an enterprise setting. Again, why still here in a latest Win10Pro setting?

Lastly, is there a way to monitor those adapters (like I do with WireShark on my usual NIC)?

Sincerely,

TG

Thanks again Ivan. That was helpful, but unfortunately didn't solve problems. But they were good insights. Too bad Microsoft doesn't want people to know what goes on on their machines, and I don't mean Microsoft when I say "their machines"