Partager via

Event ID 2120 — Active Directory Integration Configuration

  • Article

Applies To: Windows Server 2008

Directory Service Integration enables Message Queuing to function in domain mode. This makes possible the publication of queue properties to Active Directory Domain Services (AD DS) (for public queues), out-of-the-box authentication, encryption of messages using certificates that are registered in AD DS, and routing of messages across Message Queuing sites.

The health of the initial Active Directory integration configuration process is important for Message Queuing. Integration with AD DS is required so that Message Queuing can use the features that the Message Queuing domain mode operation supports.

Event Details

Product: Windows Operating System
ID: 2120
Source: MSMQ
Version: 6.0
Symbolic Name: GetMsmqConfig_ERR
Message: The Message Queuing service was unable to obtain the properties of the msmq (MSMQ Configuration) object from Active Directory. Error %1: %2

Resolve

Configure replication delays

There is an issue with replication delays. This issue should be resolved after Active Directory Domain Services (AD DS) replicates itself. After replication is complete, try to create the Active Directory object again:

  • For smaller networks, replication should take a few minutes.
  • For larger networks, the replication may take a long time.

Advanced users and domain administrators can also use the Knowledge Consistency Checker (KCC) to configure replication delays. For more information about optimizing Active Directory replication in a large network, see article 244368 in the Microsoft Knowledge Base (https://go.microsoft.com/fwlink/?LinkId=107511).

Verify

You can confirm the presence of the Directory Service Integration feature by doing the following:

  • Verify the registry key setting
  • Verify that the computer is joined to the correct domain
  • Verify Active Directory operation

To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Verify the registry key setting

Caution: Incorrectly editing the registry might severely damage your system. Before making changes to the registry, you should back up any valued data.

To verify the registry key setting:

  1. Open Registry Editor. To open Registry Editor, click Start. In the search box, type regedit, and then press ENTER.

  2. In Registry Editor, expand HKEY_LOCAL_MACHINE, expand SOFTWARE, expand Microsoft, expand MSMQ, and then click Setup.

  3. In the details pane, double-click msmq_ADIntegrated.

  4. Confirm that Value data is set to 1.

  5. Under MSMQ, expand Parameters.

  6. In the details pane, double-click Workgroup.

  7. Confirm that Value data is not set to 1.

Verify that the computer is joined to the correct domain

To verify that the computer is joined to the correct domain:

  1. Open Server Manager. To open Server Manager, click Start, point to Administrative Tools,and then click Server Manager.
  2. Verify that the domain that is listed in Computer Information is the correct domain.

Verify Active Directory operation

You can confirm that Active Directory is operating correctly by verifying that the Public Queue feature is enabled in Message Queuing.

To verify that Public Queue is enabled:

  1. Open the Computer Management snap-in. To open Computer Management, click Start. In the search box, type compmgmt.msc, and then press ENTER.
  2. Navigate to MSMQ.
  3. If the Public Queues folder exists and you can right-click the folder, Message Queuing is operating correctly in domain mode with Active Directory Integration.
  4. For further confirmation, run a test application that uses the Active Directory features that you require.

Active Directory Integration Configuration

Message Queuing