New Trusted Domain:
Domain Name:Europe
Domain ID:-
Established By:
User Name:administrator
Domain:ELMW2
Logon ID:(0x0,0x804C2)
This event gets logged twice (duplicate) by the domain
controller. The DC also logs an event 620 along with this event.
The DC logs this event for both new trusted and trusting domains.
There is no way to make a distinction.
If directory service access auditing is turned on, the DC
also logs an event 565 (object opened) where the object service
is DS and the object type is trustedDomain. Trusted/trusting
domain is not identified.