# Cannot start CIM session as non-admin account

**URL:** <https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443>\
**Category:** PowerShell Help\
**Created:** [May 28, 2020, 8:41am UTC](https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443 "2020-05-28T08:41:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tsame](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tsame](https://forums.powershell.org/u/tsame)\
**Post date:** [May 28, 2020, 8:41am UTC](https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443/1 "2020-05-28T08:41:53Z")

</div>

I am trying to start a CIM session as a non-admin account. I have done the following:

- Added the non-admin account to the "Remote Management Users" group
- Modified the session configuration by running:

`Set-PSSessionConfiguration -Name Microsoft.PowerShell -showSecurityDescriptorUI`

then adding the non-admin account and giving it Full Control permissions (but Remote Management Users was already added with Full Control permissions and the non-admin account was already added to this group).

However, I am still unable to run any commands remotely that use the -CimSession parameter as I get the following error:

**The WS-Management service cannot process the request. The WMI service returned an ‘access denied’ error**

I am able to run other remote commands as the non-admin account that don’t require a CIM session such as `enter-pssession` and `Invoke-Command`

How can I use a CIM session to run commands remotely as a non-admin account?

---

<div class="post-metadata">

**Author:** ![krzydoug](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.powershell.org/krzydoug/32/1008_2.png) [@krzydoug](https://forums.powershell.org/u/krzydoug)\
**Post date:** [May 28, 2020, 10:19am UTC](https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443/2 "2020-05-28T10:19:17Z")

</div>

Hello,

The user will need WMI access. Check option 3 on this page.

[http://blog.mikesuding.com/2016/05/06/using-wmi-without-having-full-administrator-permissions/](http://blog.mikesuding.com/2016/05/06/using-wmi-without-having-full-administrator-permissions/)

I hope this helps

**EDIT**

The page linked previously now redirects to what appears to be malicious sites. I’m leaving the original link for historical record, but any newcomers should use this archived version of the blog page

> **[Using WMI without having full ‘administrator’ permissions](https://web.archive.org/web/20230328045633/http://blog.mikesuding.com/2016/05/06/using-wmi-without-having-full-administrator-permissions/)**
>
> DESCRIPTION: There are 3 ways that I have used to setup permissions to allow WMI to work. Note: These are all for the situation where the collector and target computers are all in the same Windows …

---

<div class="post-metadata">

**Author:** ![tsame](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tsame](https://forums.powershell.org/u/tsame)\
**Post date:** [May 29, 2020, 3:46am UTC](https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443/3 "2020-05-29T03:46:43Z")

</div>

> [@](#):
>
> The user will need WMI access. Check option 3 on this page.
> 
> > [Using WMI without having full ‘administrator’ permissions](http://blog.mikesuding.com/2016/05/06/using-wmi-without-having-full-administrator-permissions/)

That fixed the problem. Thanks!

---

<div class="post-metadata">

**Author:** ![dotnVo](https://avatars.discourse-cdn.com/v4/letter/d/4af34b/32.png) [@dotnVo](https://forums.powershell.org/u/dotnVo)\
**Post date:** [May 16, 2024, 8:29pm UTC](https://forums.powershell.org/t/cannot-start-cim-session-as-non-admin-account/14443/4 "2024-05-16T20:29:28Z")

</div>