Event ID: 4867

A trusted forest information entry was modified

A trusted forest information entry was modified.

Subject:
    Security ID:        %1
    Account Name:       %2
    Account Domain:     %3
    Logon ID:       %4

Trust Information:
    Forest Root:    %5
    Forest Root SID:    %6
    Operation ID:   %7
    Entry Type: %8
    Flags:  %9
    Top Level Name: %10
    DNS Name:   %11
    NetBIOS Name:   %12
    Domain SID: %13



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Authentication Policy Change"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List