Assume that you use Windows Remote Management (WinRM) on a computer that is running Windows 7 or Windows Server 2008 R2. For example, you use WinRM scripting objects, the WinRM command-line tool, or the Windows Remote Shell (WinRS) command line tool to obtain management data from remote computers. However, WinRM does not transfer the impersonation token correctly.
For example, you develop a service that backs up and recovers an Exchange server. To perform these operations, the service accesses Microsoft Exchange PowerShell commandlets by using administrative credentials for an Exchange organization. An end-user provides their logon credentials to an administrator of the Exchange organization so that the administrator can use the service to impersonate that end-user and obtain the necessary PowerShell access. However, during the impersonation process, the PowerShell commandlets fail with an "Access Denied" error.
For example, you develop a service that backs up and recovers an Exchange server. To perform these operations, the service accesses Microsoft Exchange PowerShell commandlets by using administrative credentials for an Exchange organization. An end-user provides their logon credentials to an administrator of the Exchange organization so that the administrator can use the service to impersonate that end-user and obtain the necessary PowerShell access. However, during the impersonation process, the PowerShell commandlets fail with an "Access Denied" error.