Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8

Removes the encryption type attribute for the domain. For examples of how this command can be used, see Examples.


ksetup /delenctypeattr <DomainName> 





Name of the domain to which you want to establish a connection. Use the fully qualified domain name or a simple form of the name, such as corp.contoso.com or contoso.


To view the encryption type for the Kerberos ticket-granting ticket (TGT) and the session key, run the klist command and view the output.

A status message is displayed upon successful or failed completion.

To set the domain that you want to connect to and use, run the ksetup /domain <DomainName> command.


Determine the current encryption types that are set on this computer:


Set the domain to mit.contoso.com:

ksetup /domain mit.contoso.com

Verify what the encryption type attribute is for the domain:

ksetup /getenctypeattr mit.contoso.com

Remove the set encryption type attribute for the domain mit.contoso.com:

ksetup /delenctypeattr mit.contoso.com

Additional references