Hi, I am trying to do the following: ktpass -princ HTTP/user.domain.com at DOMAIN.COM mapuser user -pass password01. The command is run on a domain controller with a different domain than what is specified in the service name, e.g. DOMAIN2.COM. Is this possible? Many thanks, Celia