The answer is that there is another place to enable special rules for the firewall. Microsoft has documented this at
http://technet.microsoft.com/en-us/library/bb490616.aspx#EJAAto launch the Group Policy tool, run "gpedit.msc". Use the directions in the link above to change the "Allow remote administration exception" to "Allow".