Edit

ksetup addkdc

  • Article

Adds a Key Distribution Center (KDC) address for the given Kerberos realm

The mapping is stored in the registry, under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Kerberos\Domains and the computer must be restarted before the new realm setting will be used.

Note

To deploy Kerberos realm configuration data to multiple computers, you must use the Security Configuration Template snap-in and policy distribution, explicitly on individual computers. You can't use this command.

Syntax

ksetup /addkdc <realmname> [<KDCname>]

Parameters

Parameter Description
<realmname> Specifies the uppercase DNS name, such as CORP.CONTOSO.COM. This value also appears as the default realm when ksetup is run, and is the realm to which you want to add the other KDC.
<KDCname> Specifies the case-insensitive, fully-qualified domain name, such as mitkdc.contoso.com. If the KDC name is omitted, DNS will locate KDCs.

Examples

To configure a non-Windows KDC server and the realm that the workstation should use, type:

ksetup /addkdc CORP.CONTOSO.COM mitkdc.contoso.com

To set the local computer account password to p@sswrd1% on the same computer as in the previous example, and then to restart the computer, type:

ksetup /setcomputerpassword p@sswrd1%

To verify the default realm name for the computer or to verify that this command worked as intended, type:

ksetup

Check the registry to make sure the mapping occurred as intended.