AD Trusts Modules PsExec Access is Denied

I am doing the AD Trusts module on the ADCS section where you have to make a certificate template vulnerable to ESC1 and request a certificate on behalf of the user tom. I have gone through all of the steps and got the tgt for tom however when i try to use PsExec to get the flag i get an access denied.

I have checked and the tom ticket is loaded with the klist command. The PsExec command I am running is:

.\PsExec.exe \ -accepteula powershell.exe.

Is there something wrong with my command?