Ksetup:delkpasswd
Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8
Removes a Kerberos password server (Kpasswd) for a realm. For examples of how this command can be used, see Examples.
Syntax
ksetup /delkpasswd <RealmName> <KpasswdName>
Parameters
Parameter |
Description |
---|---|
<RealmName> |
The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or REALM= when ksetup is run. |
<KpasswdName> |
The KDC name to be used as the Kerberos password server is stated as a case-insensitive, fully qualified domain name, such as mitkdc.contoso.com. If the KDC name is omitted, DNS might be used to locate KDCs. |
Remarks
Run the command ksetup to verify the KDC name. If kpasswd = does not appear in the output, then the mapping has not been configured. Multiple mappings will be listed, if set.
Examples
Verify the realm CORP.CONTOSO.COM uses the non-Windows KDC server mitkdc.contoso.com as the password server:
ksetup /delkpasswd CORP.CONTOSO.COM mitkdc.contoso.com
To verify the command worked as intended, run ksetup on the Windows computer to verify the realm CORP.CONTOSO.COM is not mapped to a Kerberos password server (the KDC name).