Export (0) Print
Expand All


Published: May 25, 2011

Updated: April 17, 2012

Applies To: Windows Server 2008 R2

Removes a Kerberos password server (Kpasswd) for a realm. For examples of how this command can be used, see Examples.

ksetup /delkpasswd <RealmName> <KpasswdName>


Parameter Description


The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or REALM= when ksetup is run.


The KDC name to be used as the Kerberos password server is stated as a case-insensitive, fully qualified domain name, such as If the KDC name is omitted, DNS might be used to locate KDCs.

Run the command ksetup to verify the KDC name. If kpasswd = does not appear in the output, then the mapping has not been configured. Multiple mappings will be listed, if set.

Verify the realm CORP.CONTOSO.COM uses the non-Windows KDC server as the password server:

ksetup /delkpasswd CORP.CONTOSO.COM

To verify the command worked as intended, run ksetup on the Windows computer to verify the realm CORP.CONTOSO.COM is not mapped to a Kerberos password server (the KDC name).

Community Additions

© 2016 Microsoft