(on each index,job,search,web)
start>run>dcomcnfg
expand - component services>computers>my computer>DCOM Config
find IISWAMREG; right click select properties. under security select edit under "launch and activation permissions". give your sp service account(application pool) "Allow" to local launch.
my setup (basically from the reccomended setups in the resource kit) is:
2 service accounts and 1 security group
spservice (app pool identity)
spcrawl (crawl account)
SPPSAdmins (security group)
make sure and put both accounts in that group and then under the "set sharepoint administrator group account", type in the security group you created.