Event ID 2045 — Message Queuing Windows 2000 Client Support Operation
Applies To: Windows Server 2008
You can use the Message Queuing Windows 2000 Client Support service to run Message Queuing in domain mode on Windows 2000 computers that are joined to a Windows Server 2003 domain or a Windows Server 2008 domain. This service must generate audit logs and have a global catalog to operate properly.
Event Details
Product: | Windows Operating System |
ID: | 2045 |
Source: | MSMQ |
Version: | 6.0 |
Symbolic Name: | EVENT_WARN_MQDS_CANNOT_GENERATE_AUDITS |
Message: | The Message Queuing Downlevel Client Support service has insufficient privileges to create audit log messages. |
Resolve
Enable audit generation
For the Message Queuing Windows 2000 Client Support service to generate audit logs, the account that the service runs under must have the SE_AUDIT_NAME privilege. This privilege is granted automatically to the administrators group, but you also must grant the privilege to the service that Message Queuing runs under.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To enable audit generation:
- Open Control Panel. Click Start, and then click Control Panel.
- Double-click Administrative Tools, and accept any authorization prompts.
- Double-click Local Security Policy, and accept any authorization prompts.
- In the left pane, expand Local Policies, and then click User Rights Assignment.
- In the right pane, right-click Manage Auditing and Security Log, and then click Properties.
- Ensure that the account that the Message Queuing Windows 2000 Client Support service runs under is listed there. If it is not present, add the user by clicking Add User or Group and entering the account name.
- Close the open dialog boxes to accept the changes.
Verify
Verify that the Message Queuing Windows 2000 Client Support service is installed and running.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To verify that the Message Queuing Windows 2000 Client Support service is installed and running:
- Open the Services snap-in. To open Services, click Start. In the search box, type services.msc, and then press ENTER.
- Scroll down the list of services to confirm the existence of the Message Queuing Windows 2000 Client Support service.
- Verify that the Message Queuing Windows 2000 Client Support service is started.
- For further confirmation, run a test application that uses the Active Directory features that you require.