Problems with ConfigureWinRM.ps1

### Issue Details

We are trying to Update the Windows RM Group VM with a self signed certification as we want to deploy to IIS using the RM group and we understand the custom script extension which executes the script ConfigureWinRM.ps1 will do the same on the target machine.
### Repro steps

When we are using this script as a part of Release definition it is giving the following error

2016-05-12T13:40:56.8068243Z ##[command]Import-Module -Name **l\ResourceManager\AzureResourceManager\AzureRM.Profile\AzureRM.Profile.psd1 -Global

2
2016-05-12T13:41:00.2247654Z ##[command]Add-AzureRMAccount -ServicePrincipal -Tenant *******\* -Credential System.Management.Automation.PSCredential

3
2016-05-12T13:41:01.7741550Z ##[command]Select-AzureRMSubscription -SubscriptionId 211e3925-a492-44d7-8057-02f6cdf86410 -TenantId ********

4
2016-05-12T13:41:03.3136447Z ##[error]WSManFault

5
2016-05-12T13:41:03.3556451Z ##[error] Message

6
2016-05-12T13:41:03.3566448Z ##[error] ProviderFault

7
2016-05-12T13:41:03.3566448Z ##[error] WSManFault

8
2016-05-12T13:41:03.3576442Z ##[error] Message = Access is denied.

9
2016-05-12T13:41:03.3586444Z ##[error]Error number: -2147024891 0x80070005

10
2016-05-12T13:41:03.3596447Z ##[error]Access is denied.

11
2016-05-12T13:41:06.7825404Z ##[error]CertEnroll::CX509Enrollment::_CreateRequest: Access denied. 0x80090010 (-2146893808 NTE_PERM)

12

Start with ConfigureWinRM.ps1 and reproduce it from the Release definition or through the custom script extension. Read the AzureRM account and subscription commands around the reported WSManFault and CertEnroll access-denied errors. Done means the script can configure WinRM with the self-signed certificate on the target VM without either permission error.

Written by the indexing model from the issue text.