ksetup removerealm
Deletes all information for the specified realm from the registry.
The realm name is stored in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos
and HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\Kerberos
. This entry doesn't exist in the registry by default. You can use the ksetup addrealmflags command to populate the registry.
Important
You can't remove the default realm name from the domain controller because this resets its DNS information, and removing it might make the domain controller unusable.
Syntax
ksetup /removerealm <realmname>
Parameters
Parameter | Description |
---|---|
<realmname> |
Specifies the uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or Realm= when ksetup is run. |
Examples
To remove an erroneous realm name (.CON instead of .COM) from the local computer, type:
ksetup /removerealm CORP.CONTOSO.CON
To verify the removal, you can run the ksetup command and review the output.
Related links
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for