CmdID

CmdID / Commands / ksetup

ksetup setenctypeattr

Sets the encryption type attribute for the domain. Windows commands reference

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0

Sets the encryption type attribute for the domain. A status message is displayed upon successful or failed completion. You can view the encryption type for the Kerberos ticket-granting ticket (TGT) and the session key, by running the klist command and viewing the output. You can set the domain to connect to and use, by running the ksetup /domain <domainname> command.

ksetup /setenctypeattr <domainname> {DES-CBC-CRC | DES-CBC-MD5 | RC4-HMAC-MD5 | AES128-CTS-HMAC-SHA1-96 | AES256-CTS-HMAC-SHA1-96}
klist
ksetup /domain corp.contoso.com
ksetup /setenctypeattr corp.contoso.com AES-256-CTS-HMAC-SHA1-96
ksetup /getenctypeattr corp.contoso.com
<domainname>Name of the domain to which you want to establish a connection. Use the fully qualified domain name or a simple form of the name, such as corp.contoso.com or contoso.
encryption typeMust be one of the following supported encryption types: - DES-CBC-CRC - DES-CBC-MD5 - RC4-HMAC-MD5 - AES128-CTS-HMAC-SHA1-96 - AES256-CTS-HMAC-SHA1-96