Active Directory

klist

SafeKerberos tickets

klist

Shows cached Kerberos tickets; 'klist purge' forces fresh ones — fixes stale-group and share-access oddities.

Examples

  • klist purgePurge and re-acquire tickets

Syntax

klist [purge] [tgt]

Before you run it

Purge just forces re-auth.

Used when you see

Cannot log in / auth fails
4
Reset stale credentialsPurge Kerberos tickets
See the whole flow →
Cannot access a file share
3
Reset stale credentialsRenew Kerberos
See the whole flow →
Account keeps locking out
3
Purge stale cached credentialsStale credentials on a device or task are the usual relock cause.
See the whole flow →
GPO not applying
1
Generate RSoP and check whether the GPO appearsThe report shows why a GPO was filtered out.
See the whole flow →

Related commands

The same reference, with no signal at all

Every command on this site, held on your device. The app adds 632 more: 1,510 commands and 120 fix flows, searchable with no connection. Free to install, no ads (some content is a one-time purchase).

Get it free on the App Store