ksetup

Performs tasks related to setting up and maintaining Kerberos protocol and the Key Distribution Center (KDC) to support Kerberos realms. Specifically, this command is used to: - Change the computer settings for locating Kerberos realms. In non-Microsoft, Kerberos-based implementations, this information is usually kept in the Krb5.conf file. In Windows Server operating systems, it's kept in the registry. You can use this tool to modify these settings. These settings are used by workstations to locate Kerberos realms and by domain controllers to locate Kerberos realms for cross-realm trust relationships. - Initialize registry keys that the Kerberos Security Support Provider (SSP) uses to locate a KDC for the Kerberos realm, if the computer is isn't a member of a Windows domain. After configuration, the user of a client computer running the Windows operating system can log on to accounts in the Kerberos realm. - Search the registry for the domain name of the user's realm and then resolves the name to an IP address by querying a DNS server. The Kerberos protocol can use DNS to locate KDCs by using only the realm name, but it must be specially configured to do so.

ksetup

[/setrealm <DNSdomainname>]

[/mapuser <principal> <account>]

[/addkdc <realmname> <KDCname>]

[/delkdc <realmname> <KDCname>]

[/addkpasswd <realmname> <KDCPasswordName>]

[/delkpasswd <realmname> <KDCPasswordName>]

[/server <servername>]

[/setcomputerpassword <password>]

[/removerealm <realmname>]

[/domain <domainname>]

[/changepassword <oldpassword> <newpassword>]

Show 22 options

ksetup setrealmMakes this computer a member of a Kerberos realm.

ksetup addkdcDefines a KDC entry for the given realm.

ksetup delkdcDeletes a KDC entry for the realm.

ksetup addkpasswdAdds a kpasswd server address for a realm.

ksetup delkpasswdDeletes a kpasswd server address for a realm.

ksetup serverAllows you to specify the name of a Windows computer on which to apply the changes.

ksetup setcomputerpasswordSets the password for the computer's domain account (or host principal).

ksetup removerealmDeletes all information for the specified realm from the registry.

ksetup domainAllows you to specify a domain (if the <domainname> hasn't already been set by the /domain parameter).

ksetup changepasswordAllows you to use the kpasswd to change the logged on user's password.

ksetup listrealmflagsLists the available realm flags that ksetup can detect.

ksetup setrealmflagsSets realm flags for a specific realm.

ksetup addrealmflagsAdds additional realm flags to a realm.

ksetup delrealmflagsDeletes realm flags from a realm.

ksetup dumpstateAnalyzes the Kerberos configuration on the given computer. Adds a host to realm mapping to the registry.

ksetup addhosttorealmmapAdds a registry value to map the host to the Kerberos realm.

ksetup delhosttorealmmapDeletes the registry value that mapped the host computer to the Kerberos realm.

ksetup setenctypeattrSets one or more encryption types trust attributes for the domain.

ksetup getenctypeattrGets the encryption types trust attribute for the domain.

ksetup addenctypeattrAdds encryption types to the encryption types trust attribute for the domain.

ksetup delenctypeattrDeletes the encryption types trust attribute for the domain.

/?Displays Help at the command prompt.