I called ESRI Support and found out that I had to copy the clientaccesspolicy.xml into C:\Program Files (x86)\ArcGIS\Server10.0\java\manager\web_output instead of C:\Inetpub\wwwroot because I'm using the ArcGIS Server for Java.
Put the .xml in the right place and it worked.
Thanks,
-Jon