Does anyone know what security setting in Windows 2008 locks down creating services to only allow the local admin to do it? Got a Windows 2008 SBS box that I cannot actually get the service to be created on as a domain admin, but since it is domain controller there is no local admin.