Error message when you use the BizTalk Adapter for MQ Series adapter to send and receive messages: "Access Denied" (910294)

SYMPTOMS

In Microsoft BizTalk Server 2006 and Microsoft BizTalk Server 2004, you may receive an error message that resembles one of the following when you use the BizTalk Adapter for MQSeries adapter to send messages to and to receive messages from an MQSeries server:

The adapter "MQSeries" raised an error message. Details "The adapter has encountered an 'Access Denied' error while attempting to contact the COM+ object on the MQSeries server. Ensure the BizTalk account is added to the Role on the MQSAgent COM+ application."

The adapter failed to transmit message going to send port "MQS://servername/queuename". It will be retransmitted after the retry interval specified for this Send Port. Details: "The adapter has encountered an 'Access Denied' error while attempting to contact the COM+ object on the MQSeries server. Ensure the BizTalk account is added to the Role on the MQSAgent COM+ application."

Note In this error message, servername is the name of the server and queuename is the name of the queue.

Additionally, when you try to create the receive location or the send port that is configured to use the BizTalk Adapter for MQSeries adapter, you may receive the following warning message in Event Viewer:

CAUSE

This issue may occur if one or more of the following conditions are true:

The host account for the BizTalk Adapter for MQSeries adapter does not have the required permissions for the MQSAgent COM+ application or for the MQSAgent2 COM+ application on the MQSeries server.

Note In BizTalk Server 2006, the MQSAgent COM+ application is named MQSAgent2.
On a Microsoft Windows Server 2003 Service Pack 1-based server, the host account for the BizTalk Adapter for MQSeries adapter is not a member of the Distributed COM Users group on the MQSeries server.

RESOLUTION

To resolve this issue, use the following methods. If a method does not resolve the issue, try the next method.

Method 1: Enable network COM+ access on the Microsoft Windows Server 2003-based computer

For more information about how to enable network COM+ access on a Microsoft Windows Server 2003-based computer, click the following article number to view the article in the Microsoft Knowledge Base:

817065 How to enable network COM+ access in Windows Server 2003

Method 2: Configure MSDTC settings

Configure the Microsoft Distributed Transaction Coordinator (DTC) settings on the server where BizTalk Server is installed and on the server where the MSQAgent application or the MSQAgent2 application is running. To do this, follow these steps:

Click Start, click Run, type Dcomcnfg.exe, and then click OK.
Expand Component Services, and then expand Computers.
Right-click the computer that you want, and then click Properties.
On the MSDTC tab under Transaction Configuration, click Security Configuration
Under Client and Administration, click Allow Remote Clients.
Under Transaction Manager Communication, click No Authentication Required.
Click OK two times.

Method 3: Verify that the host account is added to the role in the MQSAgent COM+ application

Verify that the host account for the BizTalk Adapter for MQSeries adapter is added to the role that was created in the MQSAgent COM+ application or in the MQSAgent2 COM+ application on the MQSeries server. You can verify this in Component Services.

Method 4: Verify that the host account for the BizTalk Adapter for MQSeries adapter is a member of the Distributed COM Users group

On a Windows Server 2003 Service Pack 1-based server, examine the group memberships of the host account for the BizTalk Adapter for MQSeries adapter. Make sure that the account is a member of the Distributed COM Users group on the MQSeries server where the MQSAgent COM+ application or where the MQSAgent2 COM+ application is installed.

REFERENCES

For more information about DCOM applications that do not work as expected after you install Microsoft Windows Server 2003 Service Pack 1, click the following article number to view the article in the Microsoft Knowledge Base:

892500 Programs that use DCOM do not work correctly after you install Microsoft Windows Server 2003 Service Pack 1

For more information about changes in the functionality of the Microsoft Distributed Transaction Coordinator (MSDTC) service after you install Windows Server 2003 Service Pack 1 or Microsoft Windows XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

899191 New functionality in the Distributed Transaction Coordinator service in Windows Server 2003 Service Pack 1 and in Windows XP Service Pack 2

For more information about DCOM security enhancements in Microsoft Windows Server 2003 Service Pack 1, visit the following Microsoft TechNet Web site:

http://technet2.microsoft.com/windowsserver/en/library/4c9a2873-2010-4dbb-b9dd-6a7d1e275f0f1033.mspx