DCOM Error 10004 - changed local admin password

We recently were purchased by another company and are migrating servers to the new domain.  We have one server that ran a few backups for us using NTBackup and ever since moving it to the new domain and changing the local admin password it has been having DCOM errors almost every minute.

Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10004
Date:            3/6/2008
Time:            12:47:29 PM
User:            N/A
Computer:      Computer
Description:
DCOM got error "Logon failure: unknown user name or bad password. " and was unable to logon Computer\administrator in order to run the server:
{722B92C5-ABCB-4D6A-9814-9A296E8D0639}

I've searched thru all services and none of those services use the local admin account, I've run thru dcomcnfg and the above credentials are not listed on any service on the Identity tab and I cant find what I think is an CLSID listed in the error above in the registry.

Where might I look to find what is trying to authenticate?

As a result the ntbackup error dumps this:

Event Type:      Error
Event Source:      NTBackup
Event Category:      None
Event ID:      8012
Date:            3/6/2008
Time:            12:43:50 PM
User:            N/A
Computer:      Computer
Description:
The 'ESE API' returned 'Unable to perform the operation. Either you can not connect to the specified server
or the service you are trying to connect to is not running.
' from a call to 'HrESEBackupRestoreNodes()' additional data 'Computer'

I'm not backing up exchange which is what this error is somehow tied to so not sure the relevance.  But something is not starting that is pivotal to ntbackup as far as I can tell and it continually locks the local admin account after X failed attempts to authenticate.

Help much appreciated.