"Access is Denied" error when installing Message Queuing Client against a Message Queuing 2.0 server (314813)



The information in this article applies to:

  • Microsoft Message Queue Server (MSMQ) 1.0
  • Microsoft Message Queuing 2.0
  • Microsoft Message Queuing 3.0

This article was previously published under Q314813

SYMPTOMS

When you attempt to install the Microsoft Message Queue Server, also known as MSMQ, 1.0, Microsoft Message Queuing 2.0, or Message Queuing 3.0 client against an Message Queuing 2.0 server, the Message Queuing installation may fail with the following error message:
Unable to Create Object in Active Directory. Error 0xc00e0025. Access is Denied.

CAUSE

During the installation of the MSMQ client, an MSMQ object is created under the computer object on which MSMQ is being installed in Active Directory. If the user who is attempting to install MSMQ does not have the necessary permissions to create an object in Active Directory, this installation will fail with the error message shown in the "Symptoms" section.

This error may also occur if the computer object in Active Directory is corrupted or due to an Active Directory replication delay if the computer has just joined the Active Directory domain.

RESOLUTION

Make sure that the user account that is used during installation is a domain user with the permissions needed to create child objects in Active Directory.

If the user has the necessary permissions and the computer was just joined to the domain, forcing a Active Directory replication may resolve the issue.

If the problem still persists, there may be a corrupted computer object in Active Directory. To resolve this, take the client computer out of the domain, delete the computer object, and then rejoin the domain so that a new computer object is created.

WARNING: Deleting a computer object in Active Directory can cause problems on the client computer; before doing this, make sure that no services running on the client computer will be affected.

STATUS

This behavior is by design.

MORE INFORMATION

Steps to Reproduce Behavior

To reproduce this behavior, log on to the client computer with a local account (not a domain account) and then try to install the MSMQ independent client on this computer. The installation will fail with the error message shown in the "Symptoms" section.

REFERENCES

For a detailed description on the security permissions required for installing MSMQ, see the Windows Help file.

Modification Type:MajorLast Reviewed:4/18/2005
Keywords:kbprb KB314813