ksetup addhosttorealmmap
Adds a service principal name (SPN) mapping between the stated host and the realm. This command also allows you to map a host or multiple hosts that are sharing the same DNS suffix to the realm.
The mapping is stored in the registry, under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\HostToRealm.
Syntax
ksetup /addhosttorealmmap <hostname> <realmname>
Parameters
| Parameter | Description |
|---|---|
<hostname> |
The host name is the computer name, and it can be stated as the computer's fully qualified domain name. |
<realmname> |
The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM. |
Examples
To map the host computer IPops897 to the CONTOSO realm, type:
ksetup /addhosttorealmmap IPops897 CONTOSO
Check the registry to make sure the mapping occurred as intended.