Yes, using session security: session.useSessionSecurity(true); Also, your assumption...
I have tested my user account using WBEMTEST and it works remotely against Windows...