I did all that, including the DCOM local group. What's even stranger is that the AD group I am part of is local admin on this server. I'm missing something really stupid.