Take a look at this article[/url]. Though he doesn't say it, the @WindowsUsersAndGroupsInSysadminRole he talks about is in the Server Installation Settings facet. (Of course ;-))