Event ID:
4867
Category:
Policy Change
Subcategory:
Authentication Policy Change
Supported on:
Windows Vista, Windows Server 2008
A trusted forest information entry was modified.
Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4
Trust Information:
Forest Root: %5
Forest Root SID: %6
Operation ID: %7
Entry Type: %8
Flags: %9
Top Level Name: %10
DNS Name: %11
NetBIOS Name: %12
Domain SID: %13