ksetup removerealm

Deletes all information for the specified realm from the registry.

The realm name is stored in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos and HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\Kerberos. This entry doesn't exist in the registry by default. You can use the ksetup addrealmflags command to populate the registry.

Important

You can't remove the default realm name from the domain controller because this resets its DNS information, and removing it might make the domain controller unusable.

Syntax

ksetup /removerealm <realmname>

Parameters

Parameter Description
<realmname> Specifies the uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or Realm= when ksetup is run.

Examples

To remove an erroneous realm name (.CON instead of .COM) from the local computer, type:

ksetup /removerealm CORP.CONTOSO.CON

To verify the removal, you can run the ksetup command and review the output.