Set permissions for routing link objects
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To set permissions for routing link objects
Open Active Directory Sites and Services MsmqServices node.
Where?
Click Start, click Programs, click Administrative Tools, and click Active Directory Sites and Services to launch the Active Directory Sites and Services dialog box.
Click Active Directory Sites and Services in the console tree.
Click the View menu of the Active Directory Sites and Services dialog box and select the option to Show Services Node if this option is not already enabled.
Click to expand the Services node in the console tree.
Right-click MsmqServices, and then click Properties.
On the Security page of the MsmqServices node, set permissions as needed:
To grant permissions for this object to a group or user appearing under Group or user names, select the applicable group or user, and then in Permissions for GroupOrUser, select the check boxes in the Allow column.
To deny a group or user permissions for this object to a group or user appearing under Group or user names, select the applicable group or user appearing under Group or user names, select the applicable group or user, and then in Permissions for GroupOrUser, select the check boxes in the Deny column.
To add a new group or user for access, click Add and in the Select Users, Computers, or Groups dialog box, click Object Types, select the appropriate Object type, clear the remaining check boxes, and click OK. In Enter the object name to select, type the name of a group or user or the names of one or more groups or users separated by semicolons, and then click OK. Or, click Advanced to search for groups or users, enter the applicable parameters, click Find Now, select the group or user, click OK, and then click OK again. Then select the group or user you just added and select the applicable check boxes in Permissions for GroupOrUser as needed.
Note
Each routing link object is a child object of the MsmqServices object. Thus, the Create all child objects and Delete all child objects permissions for the MsmqServices object are needed to create, modify, and delete routing links. By default, only the Enterprise Admins group is granted both of these permissions.
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
See Also
Concepts
Message Queuing and Active Directory
Access control for Message Queuing
Configuring routing links
Working with MMC console files