Home / server / Questions / 210559
Accepted
Adam Holmberg
Asked: 2010-12-09 11:58:52 +0800 CST

Access Denied When Editing MSMQ Messsage Queuing Properties

  • 772

I'm trying to adjust Message Queuing properties (specifically, message storage limits) via Computer Management on my machine. It fails with the following message:

The properties of cannot be set.
Error: Access is denied.

I am logged in with an account that is part of the local Administrators group. I can perform all other administrative tasks I have tried. What could be preventing me from changing these settings?

Platform: Windows Vista Business SP2 (x64)

windows-vista permissions msmq

5 Answers

  1. Best Answer

    Putting this here for posterity ;)

    Background: For as long as I’ve been using Windows 2008 R2, I have not been able to change the Message Queuing configuration settings (such as storage limits, storage locations, security, etc.) or access the System Queues (Journal messages, Dead-letter messages, Transactional dead-letter messages); all attempts at doing any of these things resulted in a cryptic “Access is denied” error. Whenever I needed to install Message Queuing on a server in our environment, I used Server Manager to install the Message Queuing Feature.

    Solution(?): On a whim, rather than install the Message Queuing Feature, I instead choose to add the “Application Server” Role. Adding this role automatically selected and installed the Message Queuing Feature, though it only enabled the Message Queuing Server, not Directory Service Integration and Message Queuing Triggers.

    I am now able to re-configure Message Queuing settings, as well as access and perform actions on the system queues.

    • 6

  2. This blog may also be useful: http://blog.aggregatedintelligence.com/2012/03/msmqsecurity-descriptor-cannot-be-set.html

    Basically, it says that in order to be able to change the settings of a queue, your account must be set as an owner of the queue and it explains how to do so.

    It worked for me.

    • 4

  3. So what are the security settings for Message Queuing on your machine? If the settings are open enough then it maybe a User Access Control issue where Computer Management is not being raised to administrator level even though you are logged in as a local admin.

    Cheers John Breakwell

    • 0

  4. I had the same problem and found this useful:

    1. Go to the server which host the MSMQ
    2. Click Start > Run then Regedit
    3. Navigate to HKLM\Software\Microsoft\MSMQ\Parameters\
    4. you will see a Binary Type ‘REG_DWORD’ named as Workgroup.
    5. The Data for that should be 0×00000000 (0)
    6. Doubleclick on that DWORD and change the value to 1. Leave everything else as default
    7. Close Regedit
    8. Go to services then restart MSMQ service.
    9. Right click properties on Message Queuing. You should be able to see more tabs and the error is gone.
    • 0

  5. Try below solution which worked for me:-

    Run Server Manager on the machine that is hosting the queue. Right-click on Features and click "add features"

    Drill down under Message Queuing and under Message Queuing Services. You should see a checkbox for Directory Service Integration.

    Check it and click install.

    Usually you have to reboot the server for it to show the change.

    • 0