Ksetup:delhosttorealmmap
Published: May 25, 2011
Updated: April 17, 2012
Applies To: Windows Server 2008 R2
Removes a service principal name (SPN) mapping between the stated host and the realm. For examples of how this command can be used, see Examples.
ksetup /delhosttorealmmap <HostName> <RealmName>
| Parameter | Description |
|---|---|
|
<HostName> |
The host name is the computer name, and it can be stated as the computer's fully qualified domain name. |
|
<RealmName> |
The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM. |
When a host to realm (or multiple hosts to realm) mapping exists, this command removes that mapping.
The mapping is recorded in the registry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentContolSet\Lsa\Kerberos\HostToRealm. You should verify the mapping in the registry after using this command.
Altering the configuration of the realm CONTOSO, delete the mapping of the host computer IPops897 to the realm:
ksetup /delhosttorealmmap IPops897 CONTOSO
After running this command, you can verify in the registry that the mapping is as intended.
