diff --git a/source/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication.txt b/source/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication.txt
index 75c43d522ef..623d3510356 100644
--- a/source/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication.txt
+++ b/source/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication.txt
@@ -76,15 +76,17 @@ account running the ``mongod.exe`` and the ``mongos.exe`` service:
 
 .. code-block:: sh
 
-   setspn.exe -A <service>/<fully qualified domain name> <service account name>
+   setspn.exe -S <service>/<fully qualified domain name> <service account name>
 
-For example, if :binary:`~bin.mongod.exe` runs as a service named
-``mongodb`` on ``testserver.mongodb.com`` with the service account name
-``mongodtest``, assign the SPN as follows:
+.. example::
 
-.. code-block:: sh
+  If :binary:`~bin.mongod.exe` runs as a service named
+  ``mongodb`` on ``testserver.mongodb.com`` with the service account
+  name ``mongodtest``, assign the SPN as follows:
+
+  .. code-block:: sh
 
-   setspn.exe -A mongodb/testserver.mongodb.com mongodtest
+     setspn.exe -S mongodb/testserver.mongodb.com mongodtest
 
 .. _enable-mixed-kerberos-and-cr-windows: