Live users disappears in few minutes- STAS


I have problem using WMI as logoff detection method on STAS and most of live users disconnect after few minutes from logging to any device 

I use STAS on DC and Additional DC and I opened all needed ports for DCs and users devices through group policy and it was working like charm from about 3 years till two weeks ago , the ADC working properly with no problems , but the DC on the other hand not working properly with STAS and all live users complaining 

kindly note DC and ADC in different sites but the same policies applied to both of them

tried to troubleshoot the problem and opened a ticket with SOPHOS support and they didn't find out the problem and told me as ping logoff detection working properly (and it is working good but I don't like it) your problem in system

what I noticed that WMI  verification on ADC working good , on the other side it's giving "access is denied on DC" (attached photos)

please help me finding out where is the problem

Edited TAGs
[edited by: Erick Jan at 12:41 PM (GMT -7) on 14 Sep 2023]