Event ID: 4866

A trusted forest information entry was removed

A trusted forest information entry was removed.

Subject:
    Security ID:        %10
    Account Name:       %11
    Account Domain:     %12
    Logon ID:       %13

Trust Information:
    Forest Root:    %1
    Forest Root SID:    %2
    Operation ID:   %3
    Entry Type: %4
    Flags:  %5
    Top Level Name: %6
    DNS Name:   %7
    NetBIOS Name:   %8
    Domain SID: %9



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Authentication Policy Change"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List