Microsoft KB Archive/223788

= PRB: Opening Queue Brings MQ_ERROR_ACCESS_DENIED =

Article ID: 223788

Article Last Modified on 11/4/2002

-

APPLIES TO


 * Microsoft Message Queue Server 1.0

-



This article was previously published under Q223788



SYMPTOMS
When a user attempts to open a queue, the following error occurs:

MQ_ERROR_ACCESS_DENIED

However, queue security shows that the user running the application has the authority to read the queue.



MORE INFORMATION
The group "Everyone" has been removed from the queue security access list.

When an application opens an MSMQ queue, the call is satisfied by the local MSMQ service. The MSMQ service makes a call to retrieve properties for that queue from an MSMQ Site Controller. This request for properties is made under the context of the user account for the local MSMQ service. By default, the MSMQ service runs as a local system account. This results in the MSMQ Site Controller resolving the permissions to get properties for the queue under "Everyone." When the "Everyone" is removed from the permissions list for the queue, the MSMQ Site Controller service denies access to the queue properties, which results in an MQ_ERROR_ACCESS_DENIED error.

WORKAROUND
To work around this problem, either:
 * Grant "Everyone" the right to get properties. -or-


 * Run the Message Queue service under a domain user that has these rights.

Keywords: kbprb KB223788

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.