Microsoft KB Archive/314813

= &quot;Access is Denied&quot; error when installing Message Queuing Client against a Message Queuing 2.0 server =

Article ID: 314813

Article Last Modified on 2/23/2007

-

APPLIES TO


 * Microsoft Message Queue Server 1.0
 * Microsoft Message Queuing 2.0
 * Microsoft Message Queuing 3.0

-



This article was previously published under Q314813



SYMPTOMS
When you attempt to install the Microsoft Message Queue Server, also known as MSMQ, 1.0, Microsoft Message Queuing 2.0, or Message Queuing 3.0 client against an Message Queuing 2.0 server, the Message Queuing installation may fail with the following error message:

Unable to Create Object in Active Directory. Error 0xc00e0025. Access is Denied.



CAUSE
During the installation of the MSMQ client, an MSMQ object is created under the computer object on which MSMQ is being installed in Active Directory. If the user who is attempting to install MSMQ does not have the necessary permissions to create an object in Active Directory, this installation will fail with the error message shown in the &quot;Symptoms&quot; section.

This error may also occur if the computer object in Active Directory is corrupted or due to an Active Directory replication delay if the computer has just joined the Active Directory domain.



RESOLUTION
Make sure that the user account that is used during installation is a domain user with the permissions needed to create child objects in Active Directory.

If the user has the necessary permissions and the computer was just joined to the domain, forcing a Active Directory replication may resolve the issue.

If the problem still persists, there may be a corrupted computer object in Active Directory. To resolve this, take the client computer out of the domain, delete the computer object, and then rejoin the domain so that a new computer object is created.

WARNING: Deleting a computer object in Active Directory can cause problems on the client computer; before doing this, make sure that no services running on the client computer will be affected.



STATUS
This behavior is by design.



Steps to Reproduce Behavior
To reproduce this behavior, log on to the client computer with a local account (not a domain account) and then try to install the MSMQ independent client on this computer. The installation will fail with the error message shown in the &quot;Symptoms&quot; section.

