You Are Unable to Establish a Connection with Active Directory Domain Services

  • Article

Applies To: Windows Server 2008

Describes a specific problem with Message Queuing. Includes step-by-step instructions for fixing the problem.

This problem typically occurs when a version 2.0 installation of Message Queuing is unable to connect to Active Directory Domain Services and errors similar to the following occur:

  • During installation of Message Queuing, the following error is displayed:

    0xC00e0013 - Unable to establish connection with Active Directory Domain Services. Verify that there are sufficient permissions to perform this operation.

  • If you attempt to restart the Message Queuing service, the following error is generated in the Application log:

    Event ID: 2063

    Unable to successfully complete initialization of the Queue Manager. Message Queuing may function in an unpredictable fashion.

Diagnosis

Error 0xC00e0013 is a generic error. This error can occur due to insufficient permissions in Active Directory Domain Services or network connectivity failures.

Note

This problem occurs predominantly with Message Queuing 2.0 because Message Queuing 2.0 connects to Active Directory Domain Services only through RPC communication directly to a Domain Controller that is running Message Queuing. Message Queuing 3.0 and later connect to Active Directory Domain Services using LDAP calls to any Domain Controller.

Resolution

Complete the following steps to verify permissions and fix network connectivity problems:

To verify permissions and fix network connectivity problems

  1. Verify that the account of the user performing the installation and/or the Message Queuing service account have appropriate permissions to the following objects in Active Directory Domain Services:

    • The MsmqServices object in Active Directory Domain Services

    • The user who is attempting the installation (if the error occurs during installation)

    • Domain Name System (DNS)

    • The global catalog

  2. Verify that the Message Queuing server with which you are communicating is online, if it is not, start the Message Queuing service on the target server.

  3. Verify that your computer is online, your network adapter is functioning properly, and TCP/IP is properly configured.

  4. Verify that the DNS server for the site is online and configured properly, and that the Message Queuing server's IP address has been replicated to the DNS server.

Verification

After completing the recommended steps, verify that you can install Message Queuing and/or restart the Message Queuing service on the affected computer.