Non-administrator access to WMI over CIMSession

Question

I am attempting to setup remote system monitoring using CimSessions and CimInstances in Powershell. I am using a Windows Server 2012 R2 server as my remote target.
I added my monitoring user account to the local group SERVER\WinRMRemoteWMIUsers__ and also went into WMI Control and granted 'Remote Enable' rights to this group on Root\cimv2 (used this blog post as a reference: http://www.sevecek.com/Lists/Posts/Post.aspx?ID=280).
I can create a New-CimSession but when I attempt to perform a trivial get (e.g. Get-CimInstance -CimSession $cimSession -ClassName Win32_Service) I get an 'access denied' error (Get-CimInstance : The WS-Management service cannot process the request.
The WMI service returned an 'access denied' error.) 
If I run the same cmdlets as an administrator on the remote server, they succeed.
What is the proper process for granting Remote WMI rights to a non-admin account? I do not require admin rights for my monitoring user.
Thanks.

Answer 1

So I made some progress. Here is what I have done to enable SOME remote WMI capability via WinRM:
Added user account to local group WinRMRemoteWMIUsers__ on remote server.
Via WMI Control mmc snapin, granted group local group WinRMRemoteWMIUsers__ Remote Enable rights to Root namespace and all child namespaces.
This allows me to connect and successfully run a majority of Get-CimInstance commands, e.g.
Get-CimInstance -ComputerName RemoteServer -ClassName Win32_ComputerSystem
Get-CimInstance -ComputerName RemoteServer -ClassName Win32_LocalTime
However, some classes will give me an 'Access Denied' error (yet work as an Admin), like:
Get-CimInstance -ComputerName RemoteServer -ClassName Win32_Service
Get-CimInstance -ComputerName RemoteServer -ClassName CIM_Service
It may even just be the 'Service' classes, but I am not sure.