| Event Id | 611 |
| Source | Security |
| Description | Removing Trusted Domain:      
Domain Name: <Domain Name>      
Domain ID: <Domain ID>     
Removed By:      
User Name: <User Name>      
Domain: <Domain >      
Logon ID: <Logon ID>     
|
| Event Information | According to Microsoft Cause : This event record indicates that the identified user removed a trust relationship with the specified domain. Removing certain trust relationships can have serious security implications. Trusted relationships removed by a user who is not trusted can be a security risk. Resolution : The administrator should make sure that the user who removed the trust relationship should have the authority to do so. |
| Reference Links | Event ID 611 from Source SecurityEvent ID 611 from Source Security
Alternate Event ID in Vista and Windows Server 2008 is 4707. |