Ksetup Syntax

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

KSetup Syntax

KSetup uses the following syntax:

Art Imageksetup [/SetRealmDnsDomainName] [/MapUserPrincipalAccount] [/AddkdcRealmNameKdcName] [/DelkdcRealmNameKdcName] [/AddkpasswdRealmNameKpasswdName] [/DelkpasswdRealmNameKpasswdName] [/ServerServerName] [/SetComputerPasswordPassword] [/RemoveRealmRealmName] /domainDomainName] [/ChangePasswordOldPasswdNewPasswd] [/ListRealmFlags] [/SetRealmFlagsRealmflag[flag][flag][...]] [/AddRealmFlagsRealmflag[flag][flag][...]] [/DelRealmFlagsRealmflag[flag][flag][...]] [/DumpStateNo Arguments] [/?] [/help]


  • */SetRealm* *DnsDomainName*
    Sets the name of an RFC1510 Kerberos realm.
  • */MapUser* *Principal Account*
    Maps the name of a Kerberos principal to an account (* = any/all). If account name is omitted, mapping is deleted for the specified principal.
  • */AddKdc* *RealmName KdcName*
    Adds an additional KDC address for the given realm. If KdcName is omitted, DNS may be used to locate KDCs.
  • */DelKdc* *RealmName KdcName*
    Deletes instance(s) of KDC address for the realm.
  • */AddKpasswd* *RealmName KpasswdName*
    Adds Kpasswd server address for a realm.
  • */DelKpasswd* *RealmName KpasswdName*
    Deletes Kpasswd server address for a realm.
  • */Server* *ServerName*
    Specifies the name of a Windows 2000 computer to target the changes.
  • */SetComputerPassword* *Password*
    Sets the password for the local computer.
  • */RemoveRealm* *RealmName*
    Deletes all information for this realm from the registry.
  • */Domain* *DomainName*
    Uses this domain (if DomainName is unspecified, detects it).
  • */ChangePassword* *OldPasswd NewPasswd*
    Uses Kpasswd to change the password of the logged-on user. Uses '*' to be prompted for passwords.
  • */ListRealmFlags* *No arguments*
    Lists the available realm flags that ksetup knows.
  • */SetRealmFlags* *realm flag [flag][flag][...]*
    Sets RealmFlags for a specific realm. /SetRealmFlags requires one or more arguments that are either numerical (0x5) or labels (from the /ListRealmFlags call).
  • */AddRealmFlags* *realm flag[flag][flag][...]*
    Adds additional RealmFlags to a realm.
  • */DelRealmFlags* *realm flag [flag][flag][...]*
    Deletes RealmFlags from a realm.
  • */DumpState* *No arguments*
    Analyzes the kerberos configuration on the given machine.
  • */? or /help*
    Displays the usage screen.


  • The arguments for KSetup are evaluated in the order entered. This is irrelevant for most commands except /Server.


See Ksetup Examples, Ksetup Examples or Ksetup Examples.

See Also


Ksetup Overview
Ksetup Remarks
Ksetup Examples
Alphabetical List of Tools
Xcacls Overview
Sidwalker Security Administration Tools
Sidwalk Overview
Showaccs Overview
Sdcheck Overview
Ktpass Overview
Getsid Overview