To get around the double hop problem with a JEA endpoint, you need the endpoint to use a RunAs account. That way, your credentials aren't trying to be delegated to the second computer, and instead, it's the RunAs account's credentials that are delegated. Do it this way, and avoid CredSSP.

I have created a JEA endpoint and PWSA front end.  

I am having double-hop issues.  

When connecting to my pwsa console, I run a command to perform an operation on a client computer (get-wmiobject) , and i get an access denied message.


I will re-post Monday, hopefully with some useful information, but I wanted to throw something out there in case someone has figured this out already. 



Having trouble with PowerShell WebAccess and JEA