PRB: Opening Queue Brings MQ_ERROR_ACCESS_DENIED (223788)


The information in this article applies to:

  • Microsoft Message Queue Server (MSMQ) 1.0
This article was previously published under Q223788

SYMPTOMS

When a user attempts to open a queue, the following error occurs:
MQ_ERROR_ACCESS_DENIED
However, queue security shows that the user running the application has the authority to read the queue.

MORE INFORMATION

The group "Everyone" has been removed from the queue security access list.

When an application opens an MSMQ queue, the call is satisfied by the local MSMQ service. The MSMQ service makes a call to retrieve properties for that queue from an MSMQ Site Controller. This request for properties is made under the context of the user account for the local MSMQ service. By default, the MSMQ service runs as a local system account. This results in the MSMQ Site Controller resolving the permissions to get properties for the queue under "Everyone." When the "Everyone" is removed from the permissions list for the queue, the MSMQ Site Controller service denies access to the queue properties, which results in an MQ_ERROR_ACCESS_DENIED error.

WORKAROUND

To work around this problem, either:
  • Grant "Everyone" the right to get properties. -or-

  • Run the Message Queue service under a domain user that has these rights.
Modification Type:MajorLast Reviewed:11/4/2002
Keywords:kbprb KB223788 kbAudDeveloper
©2002 Microsoft Corporation. All rights reserved.