/SetRealm <DnsDomainName> | Makes this computer a member of an RFC1510 Kerberos Realm |
/MapUser <Principal> [Account] | Maps a Kerberos Principal ('*' = any principal) to an account ('*' = an account by same name); If account name is omitted, mapping is deleted for the specified principal |
/AddKdc <RealmName> [KdcName] | Defines a KDC entry for the given realm. If KdcName omitted, DNS may be used to locate KDCs. |
/DelKdc <RealmName> [KdcName] | deletes a KDC entry for the realm. If KdcName omitted, the realm entry itself is deleted. |
/AddKpasswd <Realmname> <KpasswdName> | Add Kpasswd server address for a realm |
/DelKpasswd <Realmname> <KpasswdName> | Delete Kpasswd server address for a realm |
/Server <Servername> | specify name of a Windows machine to target the changes. |
/SetComputerPassword <Password> | Sets the password for the computer's domain account (or host principal) |
/RemoveRealm <RealmName> | delete all information for this realm from the registry. |
/Domain [DomainName] | use this domain (if DomainName is unspecified, detect it) |
/ChangePassword <OldPasswd> <NewPasswd> | Use Kpasswd to change the logged-on user's password. Use '*' to be prompted for passwords. |
/ListRealmFlags (no args) | Lists the available Realm flags that ksetup knows |
/SetRealmFlags <realm> <flag> [flag] [flag] [...] | Sets RealmFlags for a specific realm |
/AddRealmFlags <realm> <flag> [flag] [flag] [...] | Adds additional RealmFlags to a realm |
/DelRealmFlags <realm> <flag> [flag] [flag] [...] | Deletes RealmFlags from a realm. |
/DumpState (no args) | Analyze the kerberos configuration on the given machine. |
/AddHostToRealmMap <host> <realm> | Adds a mapping for <host> to <realm> to the registry. |
/DelHostToRealmMap <host> <realm> | Deletes existing mapping for <host> to <realm> from the registry. |
/SetEncTypeAttr <domainname> <enctypes> | Sets the encryption types trust attribute for <domain> to <enctypes> (multiple types should be separated by spaces). Supported encryption types are: DES-CBC-CRC, DES-CBC-MD5, RC4-HMAC-MD5, AES128-CTS-HMAC-SHA1-96, AES256-CTS-HMAC-SHA1-96 |
/GetEncTypeAttr <domainname> | Gets the encryption types trust attribute for <domain>. |
/AddEncTypeAttr <domainname> <enctypes> | Adds <enctypes> to the encryption types trust attribute for <domain> (multiple types should be separated by spaces). |
/DelEncTypeAttr <domainname> | Deletes the encryption types trust attribute for <domain>. |