System command

ksetup setrealmflags command

This guide gathers the Microsoft Learn syntax and parameter reference for ksetup setrealmflags, a Windows command or tool subcommand. Availability can depend on Windows version, role, optional feature and execution context.

Availability: Microsoft Learn command reference spanning Windows client and Windows Server releases; some entries are legacy, role-specific, optional-feature or interactive subcommands.中文

Documented syntax

ksetup /setrealmflags <realmname> [sendaddress] [tcpsupported] [delegate] [ncsupported] [rc4]

The linked Microsoft Learn article is the upstream authority. Availability may depend on Windows release, role, optional feature or interactive tool context.

Examples

Example from the linked Microsoft Learn article. Check its paths, targets and availability before adapting it.

ksetup /setrealmflags CONTOSO ncsupported delegate

Parameters, options and clauses

Option / clauseDescription
/setrealmflagsSet the flags for the specified Kerberos realm.
<realmname>Specify the uppercase DNS realm name, such as CORP.CONTOSO.COM.
sendaddressInclude the IP address in ticket-granting tickets.
tcpsupportedDeclare TCP and UDP support in the realm.
delegateTrust principals in the realm for delegation.
ncsupportedEnable name canonicalization support.
rc4Enable the realm’s RC4 encryption flag; review current security requirements before enabling legacy encryption.
Safety note

Review a command and its target before running it. Commands that alter files, services, accounts, disks, permissions or databases may be difficult to reverse. Test in a safe environment and keep backups.

Official reference ↗Back to directory