| Event Id | 611 |
| Source | Security |
| Description | Removing Trusted Domain: Domain Name: <Domain Name> Domain ID: <Domain ID> Removed By: User Name: <User Name> Domain: <Domain > Logon ID: <Logon ID> |
| Event Information | According to Microsoft Cause : This event record indicates that the identified user removed a trust relationship with the specified domain. Removing certain trust relationships can have serious security implications. Trusted relationships removed by a user who is not trusted can be a security risk. Resolution : The administrator should make sure that the user who removed the trust relationship should have the authority to do so. |
| Reference Links | Event ID 611 from Source SecurityEvent ID 611 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4707. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.