Event ID:
4866
Category:
Policy Change
Subcategory:
Authentication Policy Change
Supported on:
Windows Vista, Windows Server 2008
A trusted forest information entry was removed.
Subject:
 Security ID:  %10
 Account Name:  %11
 Account Domain:  %12
 Logon ID:  %13
Trust Information:
 Forest Root: %1
 Forest Root SID: %2
 Operation ID: %3
 Entry Type: %4
 Flags: %5
 Top Level Name: %6
 DNS Name: %7
 NetBIOS Name: %8
 Domain SID: %9
