This message was deleted.

Because they aren’t admin workstations?

Because you can use windows tools to create a capture: https://msandbu.org/network-packet-trace-with-netsh-and-analysis-with-wireshark/