Ksetup:delhosttorealmmap

Published: May 25, 2011

Updated: April 17, 2012

Applies To: Windows Server 2008 R2

Removes a service principal name (SPN) mapping between the stated host and the realm. For examples of how this command can be used, see Examples.

ksetup /delhosttorealmmap <HostName> <RealmName>

 

Parameter Description

<HostName>

The host name is the computer name, and it can be stated as the computer's fully qualified domain name.

<RealmName>

The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM.

When a host to realm (or multiple hosts to realm) mapping exists, this command removes that mapping.

The mapping is recorded in the registry in HKEY_LOCAL_MACHINE\SYSTEM\CurrentContolSet\Lsa\Kerberos\HostToRealm. You should verify the mapping in the registry after using this command.

Altering the configuration of the realm CONTOSO, delete the mapping of the host computer IPops897 to the realm:

ksetup /delhosttorealmmap IPops897 CONTOSO

After running this command, you can verify in the registry that the mapping is as intended.

Community Additions

ADD
Show: