Set installation permissions to enable upgrade from MSMQ 1.0

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set installation permissions to enable upgrade from MSMQ 1.0

  1. Open Active Directory Users and Computers.

  2. In the console tree, right-click Computers (or applicable organizational unit).


    • Active Directory Users and Computers/YourDomain/Computers (or applicable organizational unit)
  3. Click Delegate control to start the Delegation of Control Wizard, and then click Next.

  4. On the Users or Groups page, click Add.

  5. In the Select Users, Computers, or Groups dialog box, ensure that Users, Groups, or Build-in Security Principals appears in Select this object type. If it does not, click Object Types, and select these objects, clearing any other check boxes that are selected. Then click OK.

  6. In Enter the object name to select, do the following:

    • To allow authenticated users permission to install Message Queuing, under Name, type Authenticated Users, and then click OK.

    • To allow everyone permission to install Message Queuing, under Name, type Everyone, and then click OK.

  7. On the Users or Groups page, click Next.

  8. Select Create a custom task to delegate, and then click Next.

  9. On the Active Directory Object Type page, click Only the following objects in the folder, select the Computer objects check box, and then click Next.

  10. On the Permissions page, under Show these permissions, clear the General check box, and then select the Creation/deletion of specific child objects check box.

  11. Under Permissions, ensure that the Create MSMQ Configuration objects check box and the Delete MSMQ Configuration objects check box are selected, and that the other check boxes are cleared. Click Next, and then click Finish.


  • To open Active Directory Users and Computers, click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

  • Use the Delegation of Control Wizard to grant the proper permissions to users that want to install MSMQ 1.0 on a computer that is part of a domain that runs Windows Server 2003 family or Windows 2000.

  • On the Security page of the Properties dialog box, the check boxes for permissions granted using the Delegation of Control Wizard or using inherited permissions are dimmed.

  • The Delete MSMQ Configuration Objects permission is required to uninstall Message Queuing.

  • When Message Queuing is installed on computers running Windows 95, Windows 98, and some versions of Windows NT 4.0 (without a hotfix) or Windows 2000 (prior to Service Pack 4), or when these computers join a Windows Server 2003 domain, they require a given GUID when creating MSMQ configuration objects. By default a Windows Server 2003 forest does not support the addition of objects with a given GUID. To overcome this problem, it is recommended that you upgrade the client computer to an operating system that does not require creating an object with a given GUID. These include Windows NT 4.0 (with a hotfix), and Windows 2000 (with Service Pack 4).

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also


Installation permissions
Working with MMC console files