Overview
Purge Kerberos tickets from the current logon session or a specific LUID. This command removes all cached tickets, effectively clearing the authentication state for cleanup or operational security purposes.Syntax
Optional Parameters
Target specific logon session ID (requires elevation)
Examples
Use Cases
Operational Cleanup
Operational Cleanup
Post-Operation Cleanup:
- Remove injected tickets after operations
- Clean authentication state
- Restore original session state
- Clear traces of ticket manipulation
- Remove forged or stolen tickets
- Reset authentication cache
Session Management
Session Management
Authentication Reset:
- Clear corrupted ticket cache
- Force fresh authentication
- Resolve ticket conflicts
- Reset state between tests
- Clear test tickets
- Validate clean authentication
Session Targeting
Current Session (Default)
Current Session (Default)
Standard Operation:
- Purges tickets from current user session
- Requires no special privileges
- Affects only current authentication state
Specific LUID Targeting
Specific LUID Targeting
Elevated Operations:
- Requires administrative privileges
- Can target any logon session
- Useful for system-wide cleanup
Related Commands
klist- Verify ticket state after purgingptt- Inject tickets after purginglogonsession- Identify target LUIDs