Make sure you have the latest version of Subinacl.exe (there is an older version that has a bug where it will not apply the security descriptor).
Documentation for Subinacl.exe is here: http://www.robvanderwoude.com/subinacl.php
If you are not using a domain user, you can create a local user on both servers that have the same user name and password. As long as the local user names and passwords match on both machines, you can remotely manage the services.