Event ID - 611

Event Id611
DescriptionRemoving Trusted Domain:
      Domain Name: <Domain Name>
      Domain ID: <Domain ID>     

Removed By:
      User Name: <User Name>
      Domain: <Domain >
      Logon ID: <Logon ID>     

Event InformationAccording to Microsoft
Cause :
This event record indicates that the identified user removed a trust relationship with the specified domain. Removing certain trust relationships can have serious security implications. Trusted relationships removed by a user who is not trusted can be a security risk.
Resolution :
The administrator should make sure that the user who removed the trust relationship should have the authority to do so.
Reference LinksEvent ID 611 from Source SecurityEvent ID 611 from Source Security

Alternate Event ID in Vista and Windows Server 2008 is 4707.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.