Forum Discussion
Osama_Salah
Jan 17, 2025Copper Contributor
Suspected identity theft (pass-the-ticket) when switching LAN/WiFI
Hi, I see this alert "Suspected identity theft (pass-the-ticket)" when a user switches from LAN to WiFi or back. The laptop's DNS record has both IP addresses. I'm guessing Defender still thinks a ...
EliOfek
Microsoft
Jan 19, 2025This usually happens when NNR is blocked or partially blocked (ports not accessible or device is behind NAT).
I suggest to open a support ticket and the support team will know how to guide you and check what hte problem is and what needs to be done to fix it.