ksetup delkdc
Deletes instances of Key Distribution Center (KDC) names for the Kerberos realm.
The mapping is stored in the registry, under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Kerberos\Domains. After running this command, we recommend making sure the KDC was removed and no longer appears in the list.
Note
To remove realm configuration data from multiple computers, use the Security Configuration Template snap-in with policy distribution, instead of using the ksetup command explicitly on individual computers.
Syntax
ksetup /delkdc <realmname> <KDCname>
Parameters
| Parameter | Description |
|---|---|
<realmname> |
Specifies the uppercase DNS name, such as CORP.CONTOSO.COM. This is the default realm that appears when you run the ksetup command, and it's the realm from which you want to delete the KDC. |
<KDCname> |
Specifies the case-sensitive, fully-qualified domain name, such as mitkdc.contoso.com. |
Examples
To view all of the associations between the Windows realm and the non-Windows realm, and to determine which ones to remove, type:
ksetup
To remove the association, type:
ksetup /delkdc CORP.CONTOSO.COM mitkdc.contoso.com