PRB: Opening Queue Brings MQ_ERROR_ACCESS_DENIED

ID: Q223788

The information in this article applies to:

Microsoft Message Queue Server version 1.0

SYMPTOMS

When a user attempts to open a queue, the following error occurs:

MQ_ERROR_ACCESS_DENIED

However, queue security shows that the user running the application has the authority to read the queue.

MORE INFORMATION

The group "Everyone" has been removed from the queue security access list.

When an application opens an MSMQ queue, the call is satisfied by the local MSMQ service. The MSMQ service makes a call to retrieve properties for that queue from an MSMQ Site Controller. This request for properties is made under the context of the user account for the local MSMQ service. By default, the MSMQ service runs as a local system account. This results in the MSMQ Site Controller resolving the permissions to get properties for the queue under "Everyone." When the "Everyone" is removed from the permissions list for the queue, the MSMQ Site Controller service denies access to the queue properties, which results in an MQ_ERROR_ACCESS_DENIED error.

WORKAROUND

To work around this problem, either:

Grant "Everyone" the right to get properties.

Run the Message Queue service under a domain user that has these rights.

Additional query words:


Keywords          : kbMSMQ100 
Version           : winnt:1.0
Platform          : winnt 
Issue type        : kbprb

Last Reviewed: July 20, 1999