Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All



Updated: April 17, 2012

Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8

Removes the encryption type attribute for the domain. For examples of how this command can be used, see Examples.

ksetup /delenctypeattr <DomainName> 




Name of the domain to which you want to establish a connection. Use the fully qualified domain name or a simple form of the name, such as corp.contoso.com or contoso.

To view the encryption type for the Kerberos ticket-granting ticket (TGT) and the session key, run the klist command and view the output.

A status message is displayed upon successful or failed completion.

To set the domain that you want to connect to and use, run the ksetup /domain <DomainName> command.

Determine the current encryption types that are set on this computer:


Set the domain to mit.contoso.com:

ksetup /domain mit.contoso.com

Verify what the encryption type attribute is for the domain:

ksetup /getenctypeattr mit.contoso.com

Remove the set encryption type attribute for the domain mit.contoso.com:

ksetup /delenctypeattr mit.contoso.com
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2015 Microsoft