Finally, I found why, but I do not understand why. At least it has nothing to do with root
Basic problem is that the http traffic is blocked when using VLC and NCS. Wireshark do not register any http traffic. However, using a browser works and Wireshark register the http traffic.
I am running server 2012 and server 2016 as virtual machines under VMware. I assume you do the same? I always use Bridged mode for the Network Adapter to get an IP direct from the router. Here is the problem. Changing the setting from Bridged to NAT for the VM immediately allow the http traffic from VLC and NCS to pass and it connects to your camera. When I was testing Server 2008 it was on a regular computer. But, NCS and VLC in Win10 as a VM works fine in Bridged mode. So, something in the network management seems to be missing in the Server setup. I have tested several things, but with no luck. I do not have enough knowledge here so …
Tested also server 2008 as a VM with bridged network and it works.
Something has changed in the security or network or … in server 2012/16. What´s left in the URL is the /cgi-bin(video.jpg and if that can cause any problems?
But, at least the reason is figured out and also how to make it work. Maybe you can continue to search for what is missing and to make it work also in bridged mode. Can the camera deliver an mjpeg stream?