Event ID 4866
A trusted forest information entry was removedA trusted forest information entry was removed.
Subject:
Security ID: %10
Account Name: %11
Account Domain: %12
Logon ID: %13
Trust Information:
Forest Root: %1
Forest Root SID: %2
Operation ID: %3
Entry Type: %4
Flags: %5
Top Level Name: %6
DNS Name: %7
NetBIOS Name: %8
Domain SID: %9Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Authentication Policy Change"
LEFT/RIGHT arrow keys for navigation
Back to List