I'm using Powershell to query a remote computer in a domain for a wmi object, eg: "gwmi -computer test -class win32_bios". I get this error message:

Value does not fall within the expected range

Executing the query local under the same user works fine. It seems to happen on both windows 2003 and also 2008 systems.

The user that runs the shell has admin rights on the local and remote server. I checked wmi and dcom permissions as far as I know how to do this, they seem to be the same on a server where it works, and another where it does not. I think it is not a network issue, all ports are open that are needed, and it also happens within the same subnet. When sniffing the traffic we see the following errors:

RPC: c/o Alter Cont Resp: Call=0x2 Assoc Grp=0x4E4E Xmit=0x16D0 Recv=0x16D0 Warning: GssAPIMechanism is not found, either caused by not reassembled, conversation off or filtering.

And an errormessage from Kerberos:

Kerberos: KRB_ERROR - KDC_ERR_BADOPTION (13)

The option code in the packet is 0x40830000

Any idea what I should look into?