The Active Directory forest name setting was changed to "[arg1]" by user ID [arg2] at IP address [arg3].
[arg1] the new setting (blank is a valid value)
[arg2] The ID of user who changed the setting
[arg3] IP address of user who changed the setting
Informational
Audit - User action
No
No