Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8

Removes a Kerberos password server (Kpasswd) for a realm. For examples of how this command can be used, see Examples.


ksetup /delkpasswd <RealmName> <KpasswdName>





The realm name is stated as an uppercase DNS name, such as CORP.CONTOSO.COM, and is listed as the default realm or REALM= when ksetup is run.


The KDC name to be used as the Kerberos password server is stated as a case-insensitive, fully qualified domain name, such as mitkdc.contoso.com. If the KDC name is omitted, DNS might be used to locate KDCs.


Run the command ksetup to verify the KDC name. If kpasswd = does not appear in the output, then the mapping has not been configured. Multiple mappings will be listed, if set.


Verify the realm CORP.CONTOSO.COM uses the non-Windows KDC server mitkdc.contoso.com as the password server:

ksetup /delkpasswd CORP.CONTOSO.COM mitkdc.contoso.com

To verify the command worked as intended, run ksetup on the Windows computer to verify the realm CORP.CONTOSO.COM is not mapped to a Kerberos password server (the KDC name).

Additional references