October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

How to Manage an Untrusted Workgroup Server in Server Manager

A practical guide to adding an untrusted workgroup server to Server Manager, with target setup, TrustedHosts guidance, firewall checks, and troubleshooting.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To manage a workgroup server in Server Manager, enable remote management on the target, add its name to TrustedHosts on the computer running Server Manager, check WinRM firewall and network access, and connect with an account that has the necessary rights. Keep the trust entry and firewall scope limited to the computers you intend to manage: a TrustedHosts entry does not authenticate the remote computer.

Before you begin

Microsoft lists Server Manager applicability for Windows Server 2016, 2019, 2022, and 2025. Older versions may need additional updates or version-specific steps. Confirm the target version and that you can sign in with an account permitted to configure it.

As an Amazon Associate I earn from qualifying purchases.

This procedure is for workgroup or otherwise untrusted servers where NTLM/workgroup authentication applies. Domain-joined servers using Kerberos have a different trust context; do not assume the workgroup TrustedHosts step is required for them. Server Manager communicates through WinRM for the relevant settings, not every remote-management component: its remote-management configuration does not change components that use DCOM.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Enable remote management on the target server

Remote management must be enabled on the server you want to manage. On that target, choose either the Server Manager interface or an elevated command prompt.

#1 Best Overall
Tecmojo 6U Wall Mount Server Cabinet IT Network Rack Enclosure Lockable Door and Side Panels Black, Cooling Fan, Standard Glass Door, 450mm Depth, for 19” IT Equipment, A/V Devices
  • Save valuable floor space: 6U wall mount server cabinet Dimensions: 13.78" H x21.65" W x17.72" D.Maximum mounting depth is 14.2"
  • Keep critical network equipment secure: glass door and side panels are lockable to prevent unauthorized access. Front door can be installed on either side of the front of the cabinet to satisfy your door swing orientation preference
  • Easy equipment configuration: Fully adjustable mounting rails and numbered U positions, with square holes for easy equipment mounting with top and bottom punch-out panels for easy cable access
  • Durability: Made of high quality cold rolled steel holds up to 110lb (50kg) (Easy Assembly Required)
  • PCI & HIPPA and EIA/ECA-310-E compliant

Use the Server Manager interface

  1. Open Server Manager on the target server.
  2. Select Local Server.
  3. Select the Remote management property and enable remote management.

Use the command line

In an elevated command prompt on the target, run:

Configure-SMremoting.exe -enable

To inspect or disable this setting later, use Configure-SMremoting.exe -get or Configure-SMremoting.exe -disable, respectively.

Add the workgroup server to TrustedHosts

On the computer running Server Manager, open an elevated PowerShell session and append the target’s name to the client-side TrustedHosts list. Microsoft’s documented example is:

Set-Item wsman:localhostClientTrustedHosts Server01 -Concatenate -Force

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
AxcessAbles 12U Network Rack with Wheels - 500lb Capacity, 18" Depth | 19-Inch Open Frame AV Rack Case with 3” Caster Wheels | Screws, Spacer, Tool Included
  • Universal 19” Rack Mount Compatibility – Perfect for pro audio, video, IT, and network gear. Compatible with mixers, routers, patch panels, servers, power amps, and more.
  • Heavy-Duty Load Capacity – Built to support up to 550 lbs. Ideal for studio gear, DJ setups, server equipment, and AV components that demand serious stability.
  • Robust Steel Frame & Design – Made with 1.5mm thick steel and weighs 36 lbs for maximum durability, reduced vibration, and long-term reliability in any setting.
  • Mobile & Secure – Preinstalled with 3” industrial-grade caster wheels (lockable), making it easy to move and position your rack exactly where you need it.
  • All-In-One Setup Kit Included – Comes with 34 rack screws (5mm & 6mm), a 1U blank spacer, and an assembly tool—ready for fast installation out of the box.

Replace Server01 with the target server’s name. The -Concatenate option preserves existing entries; avoid replacing the list with a single host unless that is intentional.

TrustedHosts is not mutual authentication. Microsoft warns: “The computers in the trusted hosts list aren’t authenticated. The client might send credential information to those computers.” Add only the hostnames or addresses needed for the task, and use a broad wildcard such as * only if you have a deliberate, controlled reason.

Check firewall, network, credentials, and WinRM

Confirm the target’s network and firewall conditions

Check whether the management computer and target are on the same subnet or whether the target uses a Private network profile. If neither condition applies, Microsoft’s guidance is to explicitly permit the relevant remote computers in the target’s inbound Windows Remote Management (HTTP-In) firewall rule. Limit the allowed sources to intended management clients where practical.

Rank #3
Sale
StarTech 22U 4-Post Server Cabinet, 33in/83cm Deep, 1764lb (RK2236BKF)
  • ADJUSTABLE DEPTH: 4- Post 22U 19" server rack enclosure with 4 vertical rails and adjustable mounting depth 5.7" to 33.0" (14,4cm to 83,8cm); IT rack is compatible with various servers / switches / data / video / AV and other IT networking equipment
  • EASY SHIPPING AND ASSEMBLY: Enclosed 22U data rack cabinet ships compact flat-packed to avoid damage and facilitate installation; Include wheels & levelling feet to offer more stability; Home server rack cabinet is only 46.6in (118,3cm) in height
  • DESIGN AND VENTILATION: Half height server rack cabinet has lockable and removable door and side panels with vented top allowing airflow; 4 Post 19" rack with 1764lb (800kg) weight capacity (stationary); Computer cabinet rack is EIA/ECA-310-E Compliant
  • HARDWARE INCLUDED: Rolling home network rack includes rack mounting and equipment mounting hardware, such as 20 M6 cage nuts / screws, PVC cup washers; Front/rear doors and side panels Keys, 2x allen keys; Rack assembly hardware; Casters and leveling feet
  • THE IT PRO'S CHOICE: Designed and built for IT Professionals, this 22U IT Server Cabinet is backed for life, including free lifetime 24/5 multi-lingual technical assistance

Use an account with rights on the target

Connect with credentials that are valid on the remote server and have sufficient permissions. Microsoft’s workgroup troubleshooting guidance identifies membership in the target’s local Administrators group and, for some scenarios, the Remote Management Users group. The required rights depend on the management operation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify the listener and port

Server Manager expects default WinRM listener settings. Microsoft documents HTTP port 5985 and HTTPS port 5986 as the WinRM defaults. A changed listener port or default authentication mechanism can prevent communication, so verify the target’s actual listener, authentication, firewall, and policy configuration rather than assuming defaults.

Add the server and verify manageability

  1. In Server Manager on the management computer, add the target server to the server pool using its name or address.
  2. Supply credentials appropriate to the target if prompted.
  3. Open All Servers and refresh the view.
  4. Inspect the server’s manageability status and confirm Server Manager can collect data.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot “Credentials not valid” or failed data collection

If Server Manager reports Credentials not valid or cannot collect data, work through the settings that govern the connection rather than repeatedly retrying the same credentials.

Rank #4
NavePoint 12U Server Rack Enclosure with Glass Door, Cooling Fan, Locks, & Removable Side Panels - 12U Wall Mount Network Cabinet 19 Inch Rack 17.7" Deep (450mm)
  • DURABLE BUILD: Constructed from high-quality Cold Rolled Steel, the NavePoint Consumer Series 12U network cabinet boasts a sturdy, welded frame. Fitting EIA standard 19” networking equipment, this server cabinet confidently supports up to 110 lbs, providing a resilient base for your vital IT gear and equipment
  • CONVENIENT DESIGN: This 12U cabinet features a reinforced, heat-treated, tempered glass front door with a security lock. Perfect for applications requiring both security and accessibility, its compact design of 17.72"L x 21.65"W x 24.42"H offers a practical solution for space-constrained settings.
  • EASY & CUSTOMIZABLE EQUIPMENT SET UP - The 12U IT cabinet, with removable side panels and security locks, offers customization at its finest. Whether it's for an efficient device or cable management, this data cabinet ensures secure, adaptable configurations that suit your networking server requirements
  • ENHANCED VENTILATION & SECURITY - Built-in fans and flow-through ventilation work to prevent overheating, ensuring optimal operation of your equipment. The reinforced, lockable tempered glass front door not only boosts security but also facilitates easy monitoring of installed equipment.
  • SAFETY & COMPLIANCE - All NavePoint products are built to industry standards.
  • Confirm remote management is enabled on the target.
  • For workgroup/NTLM access, confirm the target is in the management computer’s TrustedHosts list.
  • Check the target’s firewall rule, source restrictions, network profile, and subnet relationship.
  • Verify the account format, password, and membership in the target groups needed for the attempted operation.
  • Confirm the WinRM listener, authentication method, and port match the environment’s configuration.
  • Refresh All Servers and recheck manageability status after correcting a setting.

What Server Manager can manage

Server Manager can add remote servers to a managed pool, organize them into custom server groups, manage supported roles and features, and launch tools such as PowerShell and MMC snap-ins. Some operations are administrator-only; Microsoft also documents ways to grant standard users access to selected inventory and event, service, or performance data.

Windows Admin Center is a related, more modern evolution of in-box tools such as Server Manager and MMC, but it is not required for this Server Manager setup.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.