Audit access to routing link objects

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

  1. Open Active Directory Sites and Services.

  2. Highlight Active Directory Sites and Services, and on the View menu, click Show Services Node.

  3. In the console tree, click MsmqServices.

    Where?

    • Active Directory Sites and Services/Services/MsmqServices
  4. In the details pane, right-click the applicable routing link, and then click Properties.

  5. On the Security page, click Advanced.

  6. On the Auditing page of the Advanced Security Settings dialog box, click Add.

  7. In the Select Users, Computers, or Groups dialog box, click Object Types, select the Group and/or Users check box as appropriate, clear the remaining check boxes, and click OK. In Enter the object name to select, type the name of a group or user whose access you want to audit or the names of several such groups or users separated by semicolons and click OK. Or, click Advanced to search for groups or users, enter the applicable parameters, click Find Now, select the group or user, click OK, and click OK again.

  8. In the Auditing Entry dialog box, in Apply onto, select the applicable objects for which user access will be audited. Then, under Access, select the appropriate check boxes next to the applicable entries and click OK. Or, to clear all audit entries, click Clear All, and then click OK.

Notes

  • To open Active Directory Sites and Services, click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Sites and Services.

  • The information generated by an audit is stored in the security log. For information on how to use Event Viewer to view information in the security log, see Related Topics.

  • This procedure can be used to audit access to any Message Queuing object under, and including, the MsmqServices object.

  • In addition to auditing access to computer and queue objects, you must also establish an audit policy for the local computer.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Auditing Message Queuing objects
Message Queuing and Active Directory
Working with MMC console files