Event ID 4867
A trusted forest information entry was modifiedA trusted forest information entry was modified.
Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4
Trust Information:
Forest Root: %5
Forest Root SID: %6
Operation ID: %7
Entry Type: %8
Flags: %9
Top Level Name: %10
DNS Name: %11
NetBIOS Name: %12
Domain SID: %13Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Authentication Policy Change"
LEFT/RIGHT arrow keys for navigation
Back to List