What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
To modify the local WinRM TrustedHosts list, open PowerShell as Administrator and use the WSMan: provider. The setting is stored on the computer initiating the connection at WSMan:localhostClientTrustedHosts.
Use Set-Item to replace the list, or add -Concatenate to append an entry without overwriting existing hosts. Microsoft’s remoting troubleshooting documentation explains when this setting is needed and how it interacts with authentication.
As an Amazon Associate I earn from qualifying purchases.
Quick commands
# View the current value
(Get-Item WSMan:localhostClientTrustedHosts).Value
# Replace the entire list
Set-Item WSMan:localhostClientTrustedHosts -Value 'Server01' -Force
# Append a host while preserving existing entries
Set-Item WSMan:localhostClientTrustedHosts -Value 'Server01' -Concatenate -ForceImportant: the replacement command discards the current list. Use -Concatenate, or the controlled script below, when you only want to add a host.
What TrustedHosts does
TrustedHosts is a local WinRM client configuration value. It is used in remoting scenarios where Windows cannot use normal Kerberos-based name authentication, including connections by IP address, workgroup environments, and some connections between domains without a trust relationship.
#1 Best Overall
- 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢𝐅𝐢 𝐄𝐱𝐭𝐞𝐧𝐝𝐞𝐫 𝐰𝐢𝐭𝐡 𝟏.𝟗 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Extend your home network with speeds of up to 1300 Mbps (5 GHz) and up to 600 Mbps (2.4 GHz). ◇
- 𝐌𝐚𝐱𝐢𝐦𝐢𝐳𝐞𝐝 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐮𝐩 𝐭𝐨 𝟐𝟏𝟎𝟎 𝐒𝐪. 𝐅𝐭 - Three adjustable external antennas provide optimal Wi-Fi coverage and reliable connections and eliminating dead zones for up to 32 devices.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
- 𝐄𝐚𝐬𝐲𝐌𝐞𝐬𝐡-𝐂𝐨𝐦𝐩𝐚𝐭𝐢𝐛𝐥𝐞 - Easily expand your network for seamless, whole-home mesh connectivity by connecting the RE550 to any EasyMesh-compatible router. Not compatible with mesh WiFi systems like Deco.*
- 𝐃𝐨𝐞𝐬 𝐍𝐨𝐭 𝐈𝐧𝐜𝐫𝐞𝐚𝐬𝐞 𝐒𝐩𝐞𝐞𝐝𝐬 - Please note that all Wireless Extenders are designed to improve WiFi coverage and not increase speeds. Actual speeds will be 50% or less from current speeds. However, improving signal reliability can boost overall performance
It is not a general Windows trust store, certificate store, Active Directory trust, firewall rule, or authorization list. Adding a destination does not grant access, provide credentials, start WinRM, or prove the remote computer’s identity.
Microsoft notes that Kerberos does not support IP addresses in the same way it supports host names. IP-based remoting therefore commonly uses NTLM; the client must use HTTPS or place the destination in TrustedHosts, and credentials are required. See Microsoft’s current remote troubleshooting guidance.
Prerequisites and scope
- Run the commands on Windows in PowerShell or Windows PowerShell.
- Launch the shell with Run as administrator.
- Have valid credentials and permission to use the remote computer.
- Ensure the remote system has a functioning WinRM configuration, listener, network path, and firewall access.
The setting is machine-wide and affects all users on the local computer. If AdminPC connects to Server01, configure TrustedHosts on AdminPC, not normally on Server01. The WSMan provider documentation also describes how to access another computer’s WSMan configuration after using Connect-WSMan.
Recommended Free Tools
View the current TrustedHosts list
Open an elevated PowerShell window and run:
Get-Item WSMan:localhostClientTrustedHostsTo return only the stored string:
(Get-Item WSMan:localhostClientTrustedHosts).ValueThe result may be empty, contain one host, or contain comma-separated values such as:
Server01,Server02,10.20.30.40,*.example.comReplace the entire list
Use Set-Item without -Concatenate when the existing entries should be replaced:
Rank #2
- 𝗢𝗻𝗲 𝗦𝘄𝗶𝘁𝗰𝗵 𝗠𝗮𝗱𝗲 𝘁𝗼 𝗘𝘅𝗽𝗮𝗻𝗱 𝗡𝗲𝘁𝘄𝗼𝗿𝗸: 5× 10/100/1000Mbps RJ45 Ports supporting Auto Negotiation and Auto MDI/MDIX.
- 𝗚𝗶𝗴𝗮𝗯𝗶𝘁 𝘁𝗵𝗮𝘁 𝗦𝗮𝘃𝗲𝘀 𝗘𝗻𝗲𝗿𝗴𝘆: Latest innovative energy-efficient technology greatly expands your network capacity with much less power consumption and helps save money.
- 𝗥𝗲𝗹𝗶𝗮𝗯𝗹𝗲 𝗮𝗻𝗱 𝗤𝘂𝗶𝗲𝘁: IEEE 802.3X flow control provides reliable data transfer and Fanless design ensures quiet operation.
- 𝗣𝗹𝘂𝗴 𝗮𝗻𝗱 𝗣𝗹𝗮𝘆: Easy setup with no software installation or configuration needed.
- 𝗔𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗙𝗲𝗮𝘁𝘂𝗿𝗲𝘀: Prioritize your traffic and guarantee high quality of video or voice data transmission with Port-based 802.1p/DSCP QoS and IGMP Snooping.
Set-Item WSMan:localhostClientTrustedHosts -Value 'Server01' -ForceSeveral specific destinations can be supplied as a comma-separated string:
Set-Item WSMan:localhostClientTrustedHosts `
-Value 'Server01,Server02,10.20.30.40' `
-ForceFQDNs are also valid:
Set-Item WSMan:localhostClientTrustedHosts `
-Value 'server01.example.com' `
-ForceBack up the current value before replacing it if you may need to restore the previous configuration:
Free tools Windows power users keep installed
One-click scans. No signup required.
$trustedHostsBackup =
(Get-Item WSMan:localhostClientTrustedHosts).ValueAdd a host without overwriting existing entries
For a one-off addition, use the provider’s -Concatenate parameter:
Set-Item WSMan:localhostClientTrustedHosts `
-Value 'Server01' `
-Concatenate `
-ForceFor an IP address:
Set-Item WSMan:localhostClientTrustedHosts `
-Value '10.20.30.40' `
-Concatenate `
-Force-Concatenate appends text to the existing value; it is not a complete de-duplication system. Repeated runs can create duplicate entries. For repeatable automation, read the list, normalize it, remove duplicates, and write it back:
$path = 'WSMan:localhostClientTrustedHosts'
$hostToAdd = 'Server01'
$current = (Get-Item $path).Value
$hosts = @(
$current -split 's*,s*' |
Where-Object { -not [string]::IsNullOrWhiteSpace($_) }
)
$hosts += $hostToAdd
$newValue = (
$hosts |
ForEach-Object { $_.Trim() } |
Where-Object { $_ } |
Select-Object -Unique
) -join ','
Set-Item $path -Value $newValue -ForceThe -join version works with older Windows PowerShell releases. Newer PowerShell versions can alternatively use Join-String.
Rank #3
- 【ETHERNET SPLITTER】LIEZHUA Gigabit Ethernet Splitter 1 in 2 provides you with an efficient network expansion solution. With this device, you can quickly expand a single network splitter port to two, enabling two devices to transfer data simultaneously at high speeds of up to 1,000 Mbps. Power connection required. (Additionally, the device is equipped with six LED indicators that make it easy for you to accurately determine which connected device is currently running)
- 【SIMULTANEOUSLY CONNECT DUAL DEVICES】With the help of this ethernet splitter high speed, you can simultaneously connect and network two devices, optimizing the utilization of your network resources and enhancing the stability of their connections. Farewell to connection problems caused by insufficient cabling. It is a simple and efficient network splitter that helps you expand your network ports. Note: Two Female Port Workable Simultaneously
- 【UNIVERSAL COMPATIBILITY】Whether you are using Cat 5, 5e, 6, 7 or 8 Ethernet cables, this rj45 splitter 1 to 2 can handle it easily. Its wide compatibility is suitable for various network environments, such as working with ADSL, hubs, switches, TVs, set-top boxes, routers, wireless devices, computers and so on. Gigabit Ethernet adapter are small, providing more flexibility for your network expansion plans, switch compatible with various operating systems
- 【EASY TO USE 】The included USB power cable offers the convenience of a ethernet splitter 1 to 2 that just plug it into a 5V/1A DC power source and it will work. This dual ethernet splitter simplifies the installation process and reduces confusion around network setup. [Note: It is recommended to use a 5V 1A/2A USB charging head for power supply, and the internet switch cannot be used when not connected.]
- 【STABLE DATA TRANSMISSION】 This LIEZHUA Ethernet Splitter features a PCB circuit board and aluminium alloy casing, equipped with RJ45 eight-pole standard jacks, gold-plated pins and ensures high-quality materials and durability through integrated mechanical soldering. Its enclosed insulated module design provides convenience and ensures a smooth experience in a variety of networking activities (LAN cable not included)
Use FQDNs, IP addresses, and wildcards
Supported entries can include computer names, fully qualified domain names, IP addresses, and wildcard patterns:
'Server01'
'server01.example.com'
'10.20.30.40'
'*.example.com'A domain wildcard can be useful in a controlled environment:
Set-Item WSMan:localhostClientTrustedHosts `
-Value '*.example.com' `
-ForceDo not use a wildcard as the default fix. The following accepts all hosts:
Set-Item WSMan:localhostClientTrustedHosts -Value '*' -ForceA broad wildcard expands the destinations accepted by the local WinRM client and affects every user on the computer. If it is used temporarily for diagnosis, replace it with the narrowest required host or remove it immediately afterward. Prefer a specific name, FQDN, IP address, or narrowly scoped domain pattern.
Remove one host
Because the value is stored as a comma-separated list, remove one entry by filtering the current value and writing the remaining entries back:
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #4
- 𝐒𝐭𝐫𝐨𝐧𝐠𝐞𝐫 𝐖𝐢-𝐅𝐢 𝐢𝐧 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Enjoy extended coverage with strong performance powered by Adaptive Path Selection and simple setup using One-Touch Connection. Perfect for everyday users looking to eliminate dead zones.
- 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢𝐅𝐢 𝐄𝐱𝐭𝐞𝐧𝐝𝐞𝐫 𝐰𝐢𝐭𝐡 𝟏.𝟐 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Extend your home network with full speeds of 867 Mbps (5 GHz) and 300 Mbps (2.4 GHz).
- 𝐌𝐚𝐱𝐢𝐦𝐢𝐳𝐞𝐝 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐮𝐩 𝐭𝐨 𝟏𝟓𝟎𝟎 𝐒𝐪. 𝐅𝐭 - Two adjustable external antennas provide optimal Wi-Fi coverage and reliable connections and eliminating dead zones for up to 32 devices.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
- 𝐖𝐢𝐅𝐢 𝐄𝐱𝐭𝐞𝐧𝐝𝐞𝐫 𝐰𝐢𝐭𝐡 𝐅𝐚𝐬𝐭 𝐄𝐭𝐡𝐞𝐫𝐧𝐞𝐭 𝐏𝐨𝐫𝐭 - Experience wired speed and reliability anywhere in your home by connecting your favorite device to the fast ethernet port.
$path = 'WSMan:localhostClientTrustedHosts'
$hostToRemove = 'Server01'
$current = (Get-Item $path).Value
$remaining = @(
$current -split 's*,s*' |
Where-Object {
$_ -and $_.Trim() -ine $hostToRemove
}
)
Set-Item $path -Value ($remaining -join ',') -ForceSet $hostToRemove to the exact entry you want to remove, such as 10.20.30.40 or the literal wildcard string *.example.com.
Clear and restore the list
Save the existing value first:
$backup = (Get-Item WSMan:localhostClientTrustedHosts).Value
$backupClear the entire list:
Set-Item WSMan:localhostClientTrustedHosts -Value '' -ForceVerify that it is empty:
(Get-Item WSMan:localhostClientTrustedHosts).ValueRestore the saved value if necessary:
Set-Item WSMan:localhostClientTrustedHosts -Value $backup -ForceTest the remoting connection
After changing the list, test the WSMan endpoint:
Test-WSMan -ComputerName 'Server01'Supply credentials when the topology or authentication method requires them:
$credential = Get-Credential
Test-WSMan -ComputerName 'Server01' -Credential $credentialThen test an actual remoting operation:
Invoke-Command `
-ComputerName 'Server01' `
-Credential $credential `
-ScriptBlock { hostname }For an interactive session:
Enter-PSSession `
-ComputerName 'Server01' `
-Credential $credentialFor IP-based connections, for example:
$credential = Get-Credential
Invoke-Command `
-ComputerName '10.20.30.40' `
-Credential $credential `
-ScriptBlock { hostname }Choose the right approach
| Situation | Preferred approach |
|---|---|
| Same or trusted domain, using a host name | Prefer normal Kerberos-based remoting; do not add TrustedHosts unless required. |
| Connection by IP address | Prefer HTTPS. Otherwise add only the specific IP and provide credentials. |
| Workgroup computers | Configure WinRM as required and use a narrow entry or HTTPS. |
| Untrusted domains | Prefer HTTPS or another stronger authentication design; use a specific entry only when appropriate. |
| Temporary troubleshooting | Add one exact host, test, then remove it. |
| Non-Windows PowerShell client | Use PowerShell remoting over SSH or configure WinRM from a Windows management host. |
HTTPS can avoid adding a destination to TrustedHosts, but it requires suitable WinRM HTTPS configuration and certificate handling. SSH is another remoting transport supported by PowerShell. See Microsoft’s PowerShell remoting FAQ.
Troubleshooting
“Access is denied” while changing the setting
Reopen PowerShell using Run as administrator. Confirm the account and current context:
whoami
Get-Item WSMan:localhostClientTrustedHostsAdministrative rights are required to view or change local WSMan configuration. Organizational policy may also control the setting.
Best Value
- 𝐇𝐢𝐠𝐡-𝐒𝐩𝐞𝐞𝐝 𝐔𝐒𝐁 𝐄𝐭𝐡𝐞𝐫𝐧𝐞𝐭 𝐀𝐝𝐚𝐩𝐭𝐞𝐫 - UE306 is a USB 3.0 Type-A to RJ45 Ethernet adapter that adds a reliable wired network port to your laptop, tablet, or Ultrabook. It delivers fast and stable 10/100/1000 Mbps wired connections to your computer or tablet via a router or network switch, making it ideal for file transfers, HD video streaming, online gaming, and video conferencing.
- 𝐔𝐒𝐁 𝟑.𝟎 𝐟𝐨𝐫 𝐅𝐚𝐬𝐭𝐞𝐫, 𝐌𝐨𝐫𝐞 𝐒𝐭𝐚𝐛𝐥𝐞 𝐃𝐚𝐭𝐚 𝐓𝐫𝐚𝐧𝐬𝐟𝐞𝐫𝐬- Powered via USB 3.0, this adapter provides high-speed Gigabit Ethernet without the need for external power(10/100/1000Mbps). Backward compatible with USB 2.0/1.1, it ensures reliable performance across a wide range of devices.
- 𝐒𝐮𝐩𝐩𝐨𝐫𝐭𝐬 𝐍𝐢𝐧𝐭𝐞𝐧𝐝𝐨 𝐒𝐰𝐢𝐭𝐜𝐡- Easily connect your Nintendo Switch to a wired network for faster downloads and a more stable online gaming experience compared to Wi-Fi.
- 𝐏𝐥𝐮𝐠 𝐚𝐧𝐝 𝐏𝐥𝐚𝐲- No driver required for Nintendo Switch, Windows 11/10/8.1/8, and Linux. Simply connect and enjoy instant wired internet access without complicated setup.
- 𝐁𝐫𝐨𝐚𝐝 𝐃𝐞𝐯𝐢𝐜𝐞 𝐂𝐨𝐦𝐩𝐚𝐭𝐢𝐛𝐢𝐥𝐢𝐭𝐲- Supports Nintendo Switch, PCs, laptops, Ultrabooks, tablets, and other USB-powered web devices; works with network equipment including modems, routers, and switches.
“The WinRM client cannot process the request”
Check whether you are connecting by IP address, from a workgroup, or across domains without a trust relationship. Confirm that the destination is either covered by an appropriate narrow TrustedHosts entry or that HTTPS is correctly configured. Supply credentials where required.
The connection still fails after adding the host
Check each layer independently:
# Confirm the entry
(Get-Item WSMan:localhostClientTrustedHosts).Value
# Test WSMan
Test-WSMan -ComputerName 'Server01'
# Test name resolution
Resolve-DnsName Server01
# Test the configured network endpoint
Test-NetConnection Server01 -Port 5985Adapt the network test to your configured transport. A successful TCP test proves reachability only; it does not prove authentication, authorization, or a valid remoting session.
If the remote computer is not configured for remoting, it may require a separate setup such as:
Enable-PSRemoting -ForceRun that only on the intended remote system and in accordance with your organization’s policy. It changes WinRM, remoting, and related firewall configuration; changing TrustedHosts alone does not enable remoting.
The WSMan drive is missing
The WSMan provider is documented for PowerShell running on Windows. It is not a universal cross-platform PowerShell command. On Linux or macOS, consider SSH-based remoting or use a Windows management host.
The list was accidentally overwritten
A command such as Set-Item ... -Value 'Server01' replaces the old value. If you did not save a backup, the previous entries may not be recoverable from that command. In future, use -Concatenate for a quick addition or the de-duplication script for automation.
Quick Recap
Security checklist
- Configure the list on the initiating computer.
- Use exact host names or IP addresses whenever possible.
- Avoid
*in production. - Remember that the setting affects all local users.
- Use valid credentials and least-privilege remote authorization.
- Prefer Kerberos with normal domain name-based remoting where it works.
- Consider HTTPS for IP-based, workgroup, or untrusted-domain remoting.
- Remove temporary entries after testing.
- Do not treat a TrustedHosts entry as certificate validation or cryptographic proof of identity.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
