Any suggestions? Export (0) Print
Expand All


Published: May 25, 2011

Updated: April 17, 2012

Applies To: Windows Server 2008 R2

Removes the encryption type attribute for the domain. For examples of how this command can be used, see Examples.

ksetup /delenctypeattr <DomainName> 


Parameter Description


Name of the domain to which you want to establish a connection. Use the fully qualified domain name or a simple form of the name, such as or contoso.

To view the encryption type for the Kerberos ticket-granting ticket (TGT) and the session key, run the klist command and view the output.

A status message is displayed upon successful or failed completion.

To set the domain that you want to connect to and use, run the ksetup /domain <DomainName> command.

Determine the current encryption types that are set on this computer:


Set the domain to

ksetup /domain

Verify what the encryption type attribute is for the domain:

ksetup /getenctypeattr

Remove the set encryption type attribute for the domain

ksetup /delenctypeattr

Community Additions

© 2015 Microsoft