I'm installing a 2008 instance on a Server 2003 machine which is already running SQL 2005.

I need to set up domain groups for the security setup step:

http://msdn.microsoft.com/en-us/library/ms179530.aspx

On Windows Server 2003, specify domain groups for SQL Server services. All resource permissions are controlled by domain-level groups that include SQL Server service accounts as group members.

Much more info on this here:

http://support.microsoft.com/kb/910708

I've had problems with being able to add the windows service accounts to the groups at install time. The security admins had to make my account a domain admin - which they were hesitant to do.

The account under which SQL Server Setup is running must have permissions to add accounts to the domain groups.

Is there a specific security setting which would allow my account to add accounts to a group?

UPDATE: I'm looking for specific instructions. I have a global group called domain\servicegroup - what do I tell the security folks to do. I'd love to figure it out myself, but I don't have access to this stuff.