Resolved! USER ID agent wmi probing
something strange with old version of user-id agent version 4.1.6-5
the user is connected on the network lan with wire and is authenticated on the active directory the result is the user is identicated in the traffic log
If the user switch from wi...