Event Id611
SourceSecurity
DescriptionRemoving Trusted Domain:
      Domain Name: <Domain Name>
      Domain ID: <Domain ID>     

Removed By:
      User Name: <User Name>
      Domain: <Domain >
      Logon ID: <Logon ID>     

Event InformationAccording to Microsoft
Cause :
This event record indicates that the identified user removed a trust relationship with the specified domain. Removing certain trust relationships can have serious security implications. Trusted relationships removed by a user who is not trusted can be a security risk.
Resolution :
The administrator should make sure that the user who removed the trust relationship should have the authority to do so.
Reference LinksEvent ID 611 from Source SecurityEvent ID 611 from Source Security

Alternate Event ID in Vista and Windows Server 2008 is 4707.


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh