Securing a Message Queue
Securing a Message Queue
Microsoft Speech Server (MSS) uses Microsoft Message Queue (MSMQ) to support speech applications that generate outbound calls.
After a message queue is created, securing it will enable Telephony Application Services (TAS) to read from the queue (TAS runs under the NetworkService account), and will also enable the application server in the business logic tier to write to the queue.
Important Always secure the message queue according to specific network user domain policies. The procedure in this topic is provided as a guideline.
To secure the queue
From Control Panel, select Administrative Tools, and click Computer Management.
Under Services and Applications, expand Message Queuing so the specific queue is visible.
Right-click the queue, and then click Properties.
In the Security tab, click Add, and then click Locations.
In the tree view, select the computer where TAS is installed, and then click OK.
In the Enter the object name to select users field, type NetworkServices, and then click OK.
Select the appropriate permissions based on the following table:
Type of queue
Local or Remote
Permissions required
Private
Local
NetworkService account must be granted permission to: Receive Message
Private
Remote
TAS machine account must be granted permission to: Receive Message
Public
Local
NetworkService account must be granted permission to: Receive Journal Message, Peek Message, Receive Message
Public
Remote
TAS machine account must be granted permission to: GetPermissions, GetProperties, Receive Journal Message, Peek Message, Receive Message
Note The account being used to run the application in the business logic tier must be allowed the permission Send Message.
Click OK.
Remarks
When configuring a public queue, administrators may see the following message logged by TAS:"Queue is not registered in the DS (Directory Services)." This message may also indicate that TAS cannot access the public queue because of insufficient permissions. As a remedy, iterate through the permission levels to find the minimum permissions required by the domain security policy that still allow TAS to access the public queue.
Next Step: Configuring Speech Server for Outbound Calling
See Also
setting up a message queue | Message Queuing Overview (MSDN) | Deploying Outbound-Calling Applications | Configuring Speech Server for Outbound Calling