Set Permissions for Routing Link Objects

  • Article

Applies To: Windows Server 2008

Use this procedure to set permissions for Message Queuing routing link objects.

You can use this procedure to set permissions for Message Queuing routing link objects. Set permissions for Message Queuing routing link objects to regulate access to the specified objects.

Membership in <Domain>\Enterprise Admins, or equivalent, is the minimum required to complete this procedure.

  1. Click Start, click Programs, click Administrative Tools, and click Active Directory Sites and Services to launch the Active Directory Sites and Services dialog box.

  2. Click Active Directory Sites and Services in the console tree.

  3. Click the View menu of the Active Directory Sites and Services dialog box and select the option to Show Services Node if this option is not already enabled.

  4. Click to expand the Services node in the console tree, and then click the MsmqServices node.

  5. Right-click routing link, and then click Properties.

  6. On the Security page of the routing link properties dialog box, set permissions as needed:

    • To grant permissions for this object to a group or user appearing under Group or user names, select the applicable group or user, and then in Permissions forGroupOrUser, select the check boxes in the Allow column.

    • To deny a group or user permissions for this object to a group or user appearing under Group or user names, select the applicable group or user appearing under Group or user names, select the applicable group or user, and then in Permissions forGroupOrUser, select the check boxes in the Deny column.

  7. To add a new group or user for access, click Add and in the Select Users, Computers, or Groups dialog box, click Object Types, select the appropriate Object type, clear the remaining check boxes, and click OK. In Enter the object name to select, type the name of a group or user or the names of one or more groups or users separated by semicolons, and then click OK. Or, click Advanced to search for groups or users, enter the applicable parameters, click Find Now, select the group or user, click OK, and then click OK again. Then select the group or user you just added and select the applicable check boxes in Permissions forGroupOrUser as needed.

Additional considerations

  • Each routing link object is a child object of the MsmqServices object. Thus, the Create all child objects and Delete all child objects permissions for the MsmqServices object are needed to create, modify, and delete routing links. By default, only the Enterprise Admins group is granted both of these permissions.

Additional references