Ok, ran across this one tonight when trying to enable the SSO account on MOSS 2007:
SSO Error: You do not have the rights to perform this operation.
In the end, I did two things (I think correctly) to fix this:
1. logged into the console using the account I wanted used for sharepoint SSO (I like RDP, thus used mstsc /console)
2. Set the Microsoft Single Sign On Account to use the account/password I wanted