Ksetup:delhosttorealmmap
Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8
Removes a service principal name (SPN) mapping between the stated host and the realm. For examples of how this command can be used, see Examples.
Syntax
ksetup /delhosttorealmmap <HostName> <RealmName>
Parameters
Parameter |
Description |
|---|---|
<HostName> |
The host name is the computer name, and it can be stated as the computer's fully qualified domain name. |
<RealmName> |
The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM. |
Remarks
When a host to realm (or multiple hosts to realm) mapping exists, this command removes that mapping.
The mapping is recorded in the registry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentContolSet\Lsa\Kerberos\HostToRealm. You should verify the mapping in the registry after using this command.
Examples
Altering the configuration of the realm CONTOSO, delete the mapping of the host computer IPops897 to the realm:
ksetup /delhosttorealmmap IPops897 CONTOSO
After running this command, you can verify in the registry that the mapping is as intended.