Aug 9, 2011
tom

MSMQ communication between different servers

Question

I’m running into a permissions issue that I think is related to domain permissions/active directory but I’m a developer and not a systems person.

I have an MSMQ queue configured on a Windows 2003 server. It is part of the ACME domain.

I have three other servers with an application that communicate with it. Two are Windows 2003 machines and one is a Windows 2008 server machine running active directory all of which are NOT part of the ACME domain, the domain shows up as TEST.local.
The two Windows 2003 machines work fine being able to READ the queue defined.

My application running under the Win2k8 machine I get the error: ‘System.Messaging.MessageQueueException: Access to Message Queuing system is denied.’

I have the MSMQ queue configured to basically allow for Everyone and ANONYMOUS with full access. Is there anything I can do to get this resolved? Unforunately I am stuck with the Windows 2003 servers for the forseeable future, nor can I revert the Win2k8 machines back.

thanks!

edit: updated which domain machines reside.

Answer

Do you mean different forests? Different domains within the same forest shouldn’t have problems.

You don’t say what operation you are trying to perform. As you have opened up queue permissions then it won’t be a send(). I expect therefore that you are trying to read from the queue which uses the RPC protocol and has a different bunch of security obstacles.

Understanding how MSMQ security blocks RPC traffic

Cross-forest MSMQ? You need to be trusting

“How do I send MSMQ messages between domains?”

MSMQ 3.0 too secure for you?

Related posts:

  1. What do I lose by running Exchange 2010 in a Windows 2003 Active Directory Domain?
  2. Ldap Authentication for Windows Standalone Servers
  3. dc promotion from 2003 to 2008R2
  4. Safe room temperature for workstations running as dev servers
  5. Servers DNS name

Leave a comment