CmdID

CmdID / Commands / ksetup

ksetup addrealmflags

The ksetup addrealmflags command adds other realm flags to a specified realm. Windows commands reference

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0

The ksetup addrealmflags command adds other realm flags to a specified realm. - Realm flags are stored in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains\<realmname>. This entry doesn't exist in the registry by default. You can use the ksetup addrealmflags command to populate the registry. - The realm flags specify other features of a Kerberos realm that aren't based on the Windows Server operating system. Computers running Windows Server can use a Kerberos server to administer authentication in the Kerberos realm instead of using a domain running a Windows Server operating system. This registry entry establishes the features of the realm and is as follows: - You can see the available and set realm flags by viewing the output of ksetup or ksetup /dumpstate.

ksetup /addrealmflags <realmname> [sendaddress] [tcpsupported] [delegate] [ncsupported] [rc4]

To list the available realm flags for the realm CONTOSO, type

ksetup /listrealmflagsIdentify

To set two flags to the CONTOSO realm, type

ksetup /setrealmflags CONTOSO ncsupported delegateIdentify

To add one more flag that isn't currently in the set, type

ksetup /addrealmflags CONTOSO SendAddressIdentify
<realmname>Specifies the uppercase DNS name, such as CORP.CONTOSO.COM.