Separate permissions in NT environment

We have a mixed mode (NT/W2K) environment here.
A major group is being moved to a different business unit. but they would continue to need access to mschines here. how do i work on separating permissions so that this group has control over the services owned by them on our machines. These services are SMS and WINS related mostly.
Any insight would be helpful..