Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Ksetup:addkdc

Published: April 17, 2012

Updated: April 17, 2012

Applies To: Windows 8, Windows Server 2008 R2, Windows Server 2012

Adds a Key Distribution Center (KDC) address for the given Kerberos realm. For examples of how this command can be used, see Examples.

ksetup /addkdc <RealmName> [<KDCName>] 

 

Parameter Description

<RealmName>

The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM, and it is listed as the default realm when ksetup is run. It is to this realm that you are attempting to add the other KDC.

<KDCName>

The KDC name is stated as a case insensitive fully qualified domain name, such as mitkdc.microsoft.com. If the KDC name is omitted, DNS will locate KDCs.

These mappings are stored in the registry under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Kerberos\Domains. To deploy Kerberos realm configuration data to multiple computers, use the Security Configuration Template snap-in and policy distribution instead of using ksetup explicitly on individual computers.

The computer must be restarted before the new realm setting will be used.

To verify the default realm name for the computer, or to verify that this command worked as intended, run ksetup at the command prompt and verify the output for the added KDC.

Configure a non-Windows KDC server and the realm that the workstation should use:

ksetup /addkdc CORP.CONTOSO.COM mitkdc.contoso.com

Run the Ksetup tool at the command line of the same computer as in the preceding command to set the local computer account password to “p@sswrd1%”. Then restart the computer.

Ksetup /setcomputerpassword p@sswrd1%

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.