Event ID:
4866
Category:
Policy Change
Subcategory:
Authentication Policy Change
Supported on:
Windows Vista, Windows Server 2008
A trusted forest information entry was removed.
Subject:
Security ID: %10
Account Name: %11
Account Domain: %12
Logon ID: %13
Trust Information:
Forest Root: %1
Forest Root SID: %2
Operation ID: %3
Entry Type: %4
Flags: %5
Top Level Name: %6
DNS Name: %7
NetBIOS Name: %8
Domain SID: %9