[Samba] svcctl - access denied

[Dennis B. Hopp]

I have a samba 3.0.23a server that is a member of a Windows 2003 Active
Directory domain.  I can use the Services MMC to see the services specified in
the svcctl list option in smb.conf but trying to stop/start any services gives
me an "Access Denied".

I have tried this as a normal user as well as the domain Administrator account.
 I'm sure it's something I'm missing, but I can't for the life of me figure it
out.

Ideas?

Also, once this is figured out, is there a way to give permissions to certain
users to stop and start some services but not others (for example, developers
may want to restart JBoss, but I don't necessarily want them messing with MySQL
on the same box).

Thanks,

--Dennis