Set permissions for Message Queuing files

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set permissions for Message Queuing files

On the desktop, right-click My Computer, and then click Explore.
Locate and right-click the folder used to store the message files, log files, and transaction log files (usually Storage under \Windows\System32\Msmq), and then click Properties.
On the Security page, in Group or user names, click Administrators.
In Permissions for Administrators, under Allow, select the Full Control check box.
In Group or user names, select any group or user, including the Administrators group, that you do not want to access the Message Queuing storage files directly, and click Remove. Repeat this step as needed.

Note

You can set both file-level and folder-level permissions only on NTFS-formatted drives. You cannot set folder-level permissions on FAT-formatted drives. (The Security tab is not available for folders on FAT-formatted drives.)

Important

By default, only members of the Administrators group of the local computer have permissions for the folder used to store message files, log files, and transaction log files. For best security practice, it is not recommended that you widen these default permissions, or you may open Message Queuing for access by unauthorized persons.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.